CWE-89

Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP w

PrestaShop from version 1.7.5.0 and before version 1.7.6.8 is vulnerable to a blind SQL Injection attack in the Catalog

The REST API in Zoho ManageEngine Applications Manager before build 14740 allows an unauthenticated SQL Injection via a

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection

Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in the getBaseCriteria() function in the protec

An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndat

An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php

RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.

WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin/preferences/save.php. Explo

In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalati

Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandora_console/

In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php v

An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerabili

An issue was discovered in Aptean Product Configurator 4.61.0000 on Windows. A Time based SQL injection affects the name

The Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant XSS), related to loginizer_login_fa

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the se

An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is prone to a SQL injectio

An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of "wp_ajax_no

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and

SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allo

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.

An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication

SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the username and password parameters to proce

NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability i

SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.

A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and belo

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An EnMon PHP script was vulnerable to SQL

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending m

The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page.

SQL injection vulnerability in BloodX 1.0 allows attackers to bypass authentication.

An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parame

The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the t

SQL injection vulnerability was discovered in Point of Sales in PHP/PDO 1.0, which can be exploited via the id parameter

An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter

An SQL injection vulnerability was discovered in Gym Management System In manage_user.php file, GET parameter 'id' is vu

Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injec

An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to exe

PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevel_id=1 userlevel_id[] parameter.

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands

SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php.

Time-based SQL injection exists in Spotweb 1.4.9 via the query string.

SQL injection vulnerability in the wp_where function in WeiPHP 5.0.

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQ

SQL injection vulnerability in yunyecms V2.0.1 via the selcart parameter.

SQL injection vulnerability in SeaCMS 10.1 (2020.02.08) via the id parameter in an edit action to admin_members_group.ph

An issue was discovered in Programi 014 31.01.2020. It has multiple SQL injection vulnerabilities.

In S+ Operations and S+ Historian, a successful SQL injection exploit can read sensitive data from the database, modify

CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parame

SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GE