CWE-89

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the 'options'

The WordPress Simple HTML Sitemap plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all vers

An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition

Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'a_id' parameter.

Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile numbe

Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allo

Mongoose before 8.8.3 can improperly use $where in match, leading to search injection.

SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with ad

A vulnerability has been found in the 1000projects Bookstore Management System PHP MySQL Project 1.0. This issue affects

An improper neutralization of special elements used in an SQL command in the papertrail/version- model of the decidim_aw

An unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5 allows an attacker wi

The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication datab

SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /Di

The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before u

The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the "id" parameter before submitting th

The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoin

Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. The application allows users to create zip

A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln

The Podlove Subscribe button plugin for WordPress is vulnerable to UNION-based SQL Injection via the 'button' attribute

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."

Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters a

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php".

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacher_login.p

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacher_login.p

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/sub_delete.php?i

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5.

Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2.

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to union-based SQL Injectio

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application is vulnerable to SQ

EC-WEB FS-EZViewer(Web)'s query functionality lacks proper restrictions of user input, allowing remote attackers authent

EBM Technologies Uniweb/SoliPACS WebServer's query functionality lacks proper restrictions of user input, allowing remot

In the module "Generate barcode on invoice / delivery slip" (ecgeneratebarcode) from Ether Creation <= 1.2.0 for PrestaS

The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress

A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute

The WP Recipe Maker plugin for WordPress is vulnerable to SQL Injection via the 'recipes' parameter in all versions up t

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is

Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer_

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /custom

Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the au

Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at h

The News Announcement Scroll plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions

The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection via

SQL Injection vulnerability in Student Enrollment In PHP 1.0 allows attackers to run arbitrary code via the Student Sear

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to SQL Injection via the 'na

The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPr

SQL injection vulnerability exists in the script DIAE_tagHandler.ashx.

SQL injection vulnerability exists in the script Handler_CFG.ashx.

SQL injection vulnerability exists in GetDIAE_unListParameters.