agentprime: SQL injection

CVE-2025-71458: FTS3 Web Monitoring 3.12.0 through 3.13.2 and 3.14.0 SQL Injection via /linkinfo

Fri, 06 Nov 2026 00:20:23 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63774: Subnet Solutions PowerSYSTEM Center SQL Injection

Fri, 06 Nov 2026 00:05:00 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-88985: Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server

Thu, 05 Nov 2026 22:06:15 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-111492: SQL injection in the push notification handler of the MatchPoint Android app

Thu, 05 Nov 2026 21:53:32 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100359: SuiteCRM: Authenticated SQL Injection In action_get_end_date function

Thu, 05 Nov 2026 18:45:59 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-97377: SuiteCRM: Authenticated SQL Injection in SOAP Portal Method portal_get_entry_list

Thu, 05 Nov 2026 18:42:28 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100365: SuiteCRM: Time-Based Blind SQL Injection via AOR_Reports ORDER BY Clause Allows Data Exfiltration by Any Authenticated User

Thu, 05 Nov 2026 18:38:37 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-71548: SuiteCRM: Authenticated SQL Injection in AOR_Reports `parameter_value` (value_type=Field) allows any low-privileged user to read the full database

Thu, 05 Nov 2026 18:37:44 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69134: SuiteCRM: SQL Injection via REST API securexss() Bypass in Relationship Management

Thu, 05 Nov 2026 18:35:49 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69141: SuiteCRM: SQL injection via search param in modules/Cases/controller.php

Thu, 05 Nov 2026 18:28:17 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69142: SuiteCRM: Authenticated SQL Injection in map_markers distance Parameter

Thu, 05 Nov 2026 18:27:10 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69140: SuiteCRM: SQL injection via get_latest_for_id param in GetLatestRevision.php

Thu, 05 Nov 2026 18:26:12 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69145: SuiteCRM: AOR Reports aor_fields.field SQL Injection

Thu, 05 Nov 2026 18:25:08 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69136: SuiteCRM: Authenticated SQL Injection In handleAttachments function

Thu, 05 Nov 2026 18:24:12 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69135: SuiteCRM: Authenticated SQL Injection In Project Module

Thu, 05 Nov 2026 18:23:15 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-61648: SuiteCRM: SQL injection via parameter_value[0] param in AOR_Report.php

Thu, 05 Nov 2026 18:20:22 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-61653: SuiteCRM: SQL injection via id param in modules/Campaigns/PopupCampaignRoi.php

Thu, 05 Nov 2026 18:18:13 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63215: SuiteCRM: Time-Based Blind SQL Injection via REST API

Thu, 05 Nov 2026 18:14:52 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63214: SuiteCRM: Authenticated SQL Injection in v4_1 get_entry_list rest api

Thu, 05 Nov 2026 18:12:25 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-61651: SuiteCRM: Authenticated SQL Injection in get_end_date function in Project Controller

Thu, 05 Nov 2026 18:10:35 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-115738: SQL injection in Trellix DLP on-prem extensions

Thu, 05 Nov 2026 15:06:41 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-81815: Apache OFBiz: SQL injection - performFind ignore-case values, MySQL/MariaDB

Thu, 05 Nov 2026 14:06:58 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-123028: itsourcecode Online Book Store admin_edit.php sql injection

Thu, 05 Nov 2026 14:00:20 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105321: SQL Injection in Kobikom Telecommunications' Kobikom

Thu, 05 Nov 2026 13:13:24 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122191: itsourcecode Airline Reservation System manage_booked.php sql injection

Thu, 05 Nov 2026 03:30:17 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122050: Campcodes Complete Sales and Inventory System with Credit Management login.php sql injection

Wed, 04 Nov 2026 23:30:10 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122048: Campcodes Division Regional Athletic Meet Game Result Matrix System check-user.php sql injection

Wed, 04 Nov 2026 23:00:15 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122038: krupalshah EmployeeRecruitmentSystem Requirement Board Update reqformprocessing.php mysql_query sql injection

Wed, 04 Nov 2026 22:30:22 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-47678: GLPI: Blind Time based SQLI in dropdowns

Wed, 04 Nov 2026 22:24:08 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-71456: vtenext before 25.02.2 SQL Injection via fieldname in Fax EditView

Wed, 04 Nov 2026 20:36:44 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-113370: Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task

Wed, 04 Nov 2026 20:01:20 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122032: SPIP before 4.4.29 Authenticated SQL Injection via where Parameter

Wed, 04 Nov 2026 15:17:01 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121009: SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injection_guard check for function names given with -func

Wed, 04 Nov 2026 14:36:35 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121007: SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow SQL injection via the where values of a nested statement in an identifier position

Wed, 04 Nov 2026 14:35:55 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-115262: Duplicator < 5.1.0 - Subscriber+ SQLi via Charset and Collation Rewriter During Restore

Wed, 04 Nov 2026 06:00:27 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121610: funadmin Frontend List Endpoint index selectList sql injection

Wed, 04 Nov 2026 02:00:20 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121731: RosarioSIS before 12.9 SQL Injection via period_id in Attendance Absence Report

Tue, 03 Nov 2026 22:55:36 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121524: sumiie24 School-Management-System Public Search Feature parent_Login.php sql injection

Tue, 03 Nov 2026 21:30:19 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121502: mathurvishal CloudClassroom-PHP-Project facultydetails.php sql injection

Tue, 03 Nov 2026 20:15:12 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-45146: Chamilo LMS: Blind SQL Injection in model.ajax.php via filters[groupOp] authentificated

Tue, 03 Nov 2026 19:54:46 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

Elo backends have code injection via unvalidated emission of programmatic AST fields

Tue, 03 Nov 2026 17:48:09 GMT

@enspirit/elo <1.0.1, fixed in 1.0.1. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-109594: SQL injection in SonicWall Global Management System (GMS)

Tue, 03 Nov 2026 16:28:35 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-65139: SQL injection in NVIDIA Slurm

Tue, 03 Nov 2026 15:35:41 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110265: runZero search SQL injection

Tue, 03 Nov 2026 15:05:23 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-120563: WPML Multilingual & Multicurrency for WooCommerce <= 5.5.7 - Authenticated (Shop Manager+) SQL Injection via Exchange Rate Field

Tue, 03 Nov 2026 04:43:09 GMT

CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-120558: Advanced Shipment Tracking for WooCommerce <= 3.9 - Authenticated (Shop Manager+) SQL Injection via 'tracking_provider' Parameter

Tue, 03 Nov 2026 04:43:07 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-58821: SQL injection in Google Android

Mon, 02 Nov 2026 19:53:38 GMT

CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-120065: psqlODBC does not escape a server-supplied column name in its updatable-cursor queries

Mon, 02 Nov 2026 19:09:14 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-120062: psqlODBC SQL injection through SQLSpecialColumns table and schema names

Mon, 02 Nov 2026 19:09:12 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105604: Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3

Mon, 02 Nov 2026 18:27:14 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.