CWE-89

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code executio

A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote

A SQL injection vulnerability in "/music/ajax.php?action=find_music" in Kashipara Music Management System v1.0 allows an

Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php. An attacker

A SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music Management System v1.0 allow

A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attacker

A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.1

SQL injection vulnerability in ATISolutions CIGES affecting versions lower than 2.15.5. This vulnerability allows a remo

SeaCMS v12.9 has a SQL injection vulnerability in the key parameter of /js/player/dmplayer/dmku/index.php?ac=so.

RuoYi CMS v4.7.9 was discovered to contain a SQL injection vulnerability via the job_id parameter at /sasfs1.

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to exe

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hiberna

An issue in EQ Enterprise Management System before v2.0.0 allows attackers to execute a directory traversal via crafted

SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret

SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret

SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret

SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret

SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret

SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret

SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret

SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret

SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret

Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/setlike.php.

Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php.

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to r

In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injec

SQL Injection in download student learning course function of Easytest Online Test Platform ver.24E01 and earlier allow

SQL Injection in download class learning course function of Easytest Online Test Platform ver.24E01 and earlier allow re

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NAC Telecommunicat

ASIS (aka Aplikasi Sistem Sekolah using CodeIgniter 3) 3.0.0 through 3.2.0 allows index.php username SQL injection for A

SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac

The Viral Signup WordPress plugin through 2.1 does not properly sanitise and escape a parameter before using it in a SQ

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Semtek Informatics

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Semtek Informatics

SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /j

SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jo

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /j

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobport

SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /job

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobport

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /j

Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/lo

FlyCASS CASS and KCM systems did not correctly filter SQL queries, which made them vulnerable to attack by outside atta

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.