SQL injection.

oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection

• oretnom23 php-travel-agency-system
• Other injection
• SQL injection

oretnom23 php-travel-agency-system traceapplication.php sql injection

• oretnom23 php-travel-agency-system
• Other injection
• SQL injection

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

• Adobe Campaign Classic
• SQL injection

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

• Adobe Campaign Classic
• SQL injection

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

• Adobe Campaign Classic
• SQL injection

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

• Adobe Campaign Classic
• SQL injection

oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection

• oretnom23 php-travel-agency-system
• Other injection
• SQL injection

oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection

• oretnom23 php-travel-agency-system
• Other injection
• SQL injection

SQL injection in Veeam Backup for Microsoft 365

• Veeam Backup for Microsoft 365
• SQL injection

Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter

• SQL injection

<22.0.5 || >=23.0.0, <23.0.2 · fixed in 22.0.5, 23.0.2

SQL injection in NVIDIA NeMo Agent Toolkit

• NVIDIA NeMo Agent Toolkit
• SQL injection

Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2

• balbooa.com Gridbox extension for Joomla
• SQL injection

YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operand

• yeswiki
• SQL injection

YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in Usernames

• yeswiki
• SQL injection

OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocket

• openpanel
• SQL injection

OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.ts

• openpanel
• SQL injection

OpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile filter

• openpanel
• SQL injection

OpenPanel before 3.0.0 ClickHouse SQL Injection via profile.values

• openpanel
• SQL injection

OpenPanel before 3.0.0 ClickHouse SQL Injection via event.events tRPC Query

• openpanel
• SQL injection

itsourcecode Online Book Store book.php sql injection

• itsourcecode Online Book Store
• Other injection
• SQL injection

BUG-000187511 - ArcGIS Server has a security vulnerability.

• Esri ArcGIS Server
• SQL injection

SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha

• aws-cdk/aws-redshift-alpha
• SQL injection

Apache SIS: SQL injection via unvalidated ORDER BY sort expression in the SQL feature store

• Apache Software Foundation Apache SIS
• SQL injection

Dolibarr ERP CRM 19.0.0 before 23.0.4 SQL Injection via bankaccounts API type field

• dolibarr
• SQL injection

An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data/{type}).

• SQL injection

A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface (/s/ajax).

• SQL injection

WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability

• Crocoblock JetEngine
• SQL injection

WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability

• David Lingren Media LIbrary Assistant
• SQL injection

HashenUdara edoc-doctor-appointment-system add-new.php sql injection

• HashenUdara edoc-doctor-appointment-system
• Other injection
• SQL injection

itsourcecode Online Cake Ordering System deletetransac.php sql injection

• itsourcecode Online Cake Ordering System
• Other injection
• SQL injection

SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbitrary code via the Login Page

• SQL injection

SourceCodester Performance Indicator System save_profile.php sql injection

• SourceCodester Performance Indicator System
• Other injection
• SQL injection

SourceCodester Performance Indicator System edit_dealer.php sql injection

• SourceCodester Performance Indicator System
• Other injection
• SQL injection

SourceCodester Performance Indicator System adddealer.php sql injection

• SourceCodester Performance Indicator System
• Other injection
• SQL injection

SourceCodester Performance Indicator System deleteproduct.php sql injection

• SourceCodester Performance Indicator System
• Other injection
• SQL injection

YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry create

• yeswiki
• SQL injection

YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API

• yeswiki
• SQL injection

SiYuan before v3.8.7 SQL Injection via History Search op and query

• siyuan
• SQL injection

krupalshah Employee Recruitment System Registration registerform3.php sql injection

• krupalshah Employee Recruitment System
• Other injection
• SQL injection

krupalshah EmployeeRecruitmentSystem Registration Wizard registerform2.php mysql_query sql injection

• krupalshah EmployeeRecruitmentSystem
• Other injection
• SQL injection

krupalshah EmployeeRecruitmentSystem Registration registerform1.php mysql_query sql injection

• krupalshah EmployeeRecruitmentSystem
• Other injection
• SQL injection

mansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection

• mansi-k Restaurant_IMS
• Other injection
• SQL injection

pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection

• pig
• Other injection
• SQL injection

WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability

• WPFactory Product Filter by WBW
• SQL injection

WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability

• Tribulant Software Newsletters
• SQL injection

Cacti: Authenticated Stored 2nd-Order SQL Injection in automation_tree_rule_items.field (incomplete-fix variant of CVE-2024-31460 / CVE-2025-24368)

• cacti
• SQL injection

Goobi viewer: Solr injection via unvalidated region parameter in spatial search

• intranda goobi-viewer-core
• SQL injection
• Other injection

Goobi viewer: Solr query injection via the legacy RSS servlet q and filterQuery parameters

• intranda goobi-viewer-core
• SQL injection
• Other injection

baserCMS: SQL injection in the admin panel and admin API

• baserproject basercms
• SQL injection

WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability

• xnau webdesign Participants Database
• SQL injection

WordPress GamiPress plugin <= 8.0.7 - SQL Injection vulnerability

• Ruben Garcia GamiPress
• SQL injection

Security Advisory 0199

• Arista Networks VeloCloud Orchestrator
• SQL injection

Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• SQL injection

Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• SQL injection

Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• SQL injection

Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• SQL injection

Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• SQL injection

mem0ai Databricks vector store vulnerable to SQL injection

• SQL injection

>=0.1.117, <1.0.8 · fixed in 1.0.8

WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability

• AmentoTech Workreap Core
• SQL injection

Lotus through 0.10.2 SQL Injection via Subscription Filter Keys

• lotus
• SQL injection