CWE-89

The Easytest contains SQL injection vulnerabilities. After obtaining user’s privilege, remote attackers can inject SQL c

The Easytest contains SQL injection vulnerabilities. After obtaining a user’s privilege, remote attackers can inject SQL

A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manag

Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. Prio

Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allow

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versi

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versi

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL Injection v

In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center. (Onl

A improper neutralization of Special Elements used in an SQL Command ('SQL Injection') in Fortinet FortiWLM version 8.6.

A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quiz_quest

The School Management System – WPSchoolPress WordPress plugin before 2.1.10 does not properly sanitize or use prepared s

The Chameleon CSS WordPress plugin through 1.2 does not have any CSRF and capability checks in all its AJAX calls, allow

The Schreikasten WordPress plugin through 0.14.18 does not sanitise or escape the id GET parameter before using it in SQ

The Unlimited PopUps WordPress plugin through 4.5.3 does not sanitise or escape the did GET parameter before using it in

The MAZ Loader – Preloader Builder for WordPress plugin before 1.3.3 does not validate or escape the loader_id parameter

The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to t

The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible WordPress plugin before

A SQL Injection vulnerability in /appliance/shiftmgn.php in TalariaX sendQuick Alert Plus Server Admin 4.3 before 8HF11

The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GE

The Stream WordPress plugin before 3.8.2 does not sanitise and validate the order GET parameter from the Stream Records

The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2,

An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before versi

The Email Before Download WordPress plugin before 6.8 does not properly validate and escape the order and orderby GET pa

The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL stateme

Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may

Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwg_token in /admin/batch_manager

A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Serv

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 in dl/dl_print.php when registering ordinary use

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dl_download.php. when registering ordinary

The mediamaticAjaxRenameCategory AJAX action of the Mediamatic WordPress plugin before 2.8.1, available to any authentic

Microsoft Defender for IoT Remote Code Execution Vulnerability

Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected v

Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions

SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project mo

JFrog Artifactory before 7.25.4 (Enterprise+ deployments only), is vulnerable to Blind SQL Injection by a low privileged

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refU

The get_query() function of the Ni WooCommerce Custom Order Status WordPress plugin before 1.9.7, used by the niwoocos_a

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Insecure design on report build via SQL query. The Systeam ap

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php.

An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021).

An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021).

An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021).

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

Changing MOTP (Mobile One Time Password) system’s specific function parameter has insufficient validation for user input

This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath optio

Unauthenticated SQL Injection (SQLi) vulnerability in WordPress uListing plugin (versions <= 2.0.3), vulnerable paramete

The SQL injection vulnerability in the Hide My WP WordPress plugin (versions <= 6.2.3) is possible because of how the IP

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection s