CWE-89

SQL injection vulnerability in the fields of warehouse document filtering form in SIMPLE.ERP software allows logged-in u

A SQL injection vulnerability has been identified in DobryCMS. Improper neutralization of input provided by user into la

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, crea

SQL injection vulnerability in DIAL's CentrosNet v2.64. Allows an attacker to retrieve, create, update, and delete datab

A SQL injection vulnerability was found in Looker Studio. A Looker Studio user with report view access could inject mal

A SQL injection vulnerability was discovered in Looker Studio that allowed for data exfiltration from BigQuery data sour

ZenTao Biz < 6.5, ZenTao Max < 3.0, ZenTao Open Source Edition < 16.5, and ZenTao Open Source Edition < 16.5.beta1 conta

Value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not saniti

The Looker endpoint for generating new projects from database connections allows users to specify "looker" as a connecti

A SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnera

A Blind SQL injection vulnerability has been identified in QuickCMS. Improper neutralization of input provided by a high

## Summary Authenticated SQL Injection Vulnerability in Endpoint Module Rest API

dawa-pharma-1.0 allows unauthenticated attackers to execute SQL queries on the server, allowing them to access sensitive

Obi08/Enrollment System 1.0 contains a SQL injection vulnerability in the keyword parameter of /get_subject.php that all

A security issue was discovered in DataMosaix Private Cloud, allowing users with low privilege to perform sensitive data

COMMAX Smart Home System CDP-1020n contains an SQL injection vulnerability that allows attackers to bypass authenticatio

Xhibiter NFT Marketplace 1.10.2 contains a SQL injection vulnerability in the collections endpoint that allows attackers

Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queri

NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulnerability in its Connectivity Server/Gatew

pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the

parse-server is a Parse Server for Node.js / Express. This vulnerability allows SQL injection when Parse Server is confi

The Amazon JDBC Driver for Redshift is a Type 4 JDBC driver that provides database connectivity through the standard JDB

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to SQL

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6

The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and in

The WP Hotel Booking plugin for WordPress is vulnerable to SQL Injection via the 'room_type' parameter of the /wphb/v1/r

Intrado 911 Emergency Gateway login form is vulnerable to an unauthenticated blind time-based SQL injection, which may a

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Membership Softwar

1Panel is a web-based linux server management control panel. 1Panel contains an unspecified sql injection via User-Agent

The Woo Inquiry plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 0.1 due to ins

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WBW Product Ta

In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an un

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parame

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter o

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HK Digital Agency

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automat

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Fineract.Th

The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to SQL Injection via the 'events' attri

The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'slug' attribute of the 'wpforo' shortcode

SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin for WordPress is vulnerable to SQL I

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to SQL Injection via the 'b2sSort

The OSM – OpenStreetMap plugin for WordPress is vulnerable to SQL Injection via the 'tagged_filter' attribute of the 'os

Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before versio

The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'meta_key' attrib

The WP Easy Gallery – WordPress Gallery Plugin plugin for WordPress is vulnerable to SQL Injection via the 'edit_imageId

The Daily Prayer Time plugin for WordPress is vulnerable to SQL Injection via the 'max_word' attribute of the 'quran_ver

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37.* <= 1.37.64 is vulne

A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access

An SQL injection vulnerability in Traffic Ops in Apache Traffic Control <= 8.0.1, >= 8.0.0 allows a privileged user with