CWE-89

Amano Xoffice parking solutions 7.1.3879 is vulnerable to SQL Injection.

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via t

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background.

Tuzicms v2.0.6 was discovered to contain a SQL injection vulnerability via the component \App\Manage\Controller\UserCont

Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php.

SiteServer CMS 7.1.3 is vulnerable to SQL Injection.

Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerr

A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows

Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vu

SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter.

SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator tem

EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter.

Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/l

Serenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection.

Easyone CRM v5.50.02 was discovered to contain a SQL Injection vulnerability via the text parameter at /Services/Misc.as

RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable.

SQL injection vulnerability in JIZHICMS 1.9.5 allows attackers to run arbitrary SQL commands via add or edit article pag

SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat para

SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted

Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the tick

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete_ticket.ph

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php.

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php.

SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows attackers to execute arbi

Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter

Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parame

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Group Arge Energy

The FL3R FeelBox WordPress plugin through 8.1 does not properly sanitise and escape a parameter before using it in a SQL

ChiKoi v1.0 was discovered to contain a SQL injection vulnerability via the load_file function.

SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue parameter, all

SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary comm

SQL Injection vulnerability in nitinparashar30 cms-corephp through commit bdabe52ef282846823bda102728a35506d0ec8f9 (May

LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/UserMa

LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/RoleMa

LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/DeptMa

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' paramet

SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitiv

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the usernam

Canteen Management System 1.0 is vulnerable to SQL Injection via /php_action/getOrderReport.php.

Liima before 1.17.28 allows Hibernate query language (HQL) injection, related to colToSort in the deployment filter.

SQL Injection vulnerability in znfit Home improvement ERP management system V50_20220207,v42 allows attackers to execute

SQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email parameter to processes/student

GeoTools is an open source Java library that provides tools for geospatial data. GeoTools includes support for OGC Filte

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServ

Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NTN Information Te

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SDD Computer Softw

A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via

Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function.