CWE-89

SourceCodester Library Management System 1.0 is affected by SQL Injection allowing an attacker to bypass the user authen

SourceCodester Online Health Care System 1.0 is affected by SQL Injection which allows a potential attacker to bypass th

EGavilan Media Under Construction page with cPanel 1.0 contains a SQL injection vulnerability. An attacker can gain Admi

EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access usin

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAnd

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb.

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup.

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addUser.

An issue was discovered in Joomla! 3.0.0 through 3.9.22. Improper filter blacklist configuration leads to a SQL injectio

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.

modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP r

SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute a

Joomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters.

A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely

An issue was discovered in SourceCodester Seat Reservation System 1.0. The file admin_class.php does not perform input v

Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter. This allows forcing the databas

SQL injection vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated us

The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly ha

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages an

PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administ

SOPlanning 1.45 has SQL injection via the user_list.php "by" parameter.

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could

BabyGekko before 1.2.4 has SQL injection.

SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries.

contao prior to 2.11.4 has a sql injection vulnerability

Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitr

Multiple SQL injection vulnerabilities in ZeusCart 4.x.

SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to execute arbitrary SQL co

Multiple SQL injection vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated us

payment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.4 directly insert values

An issue was discovered in TestLink 1.9.19. The relation_type parameter of the lib/requirements/reqSearch.php endpoint i

In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, multiple SQL Injection vulnerabilities ha

IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is vu

Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run m

Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary

Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a

An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tab

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (C

A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows a

An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.0

The custom-searchable-data-entry-system (aka Custom Searchable Data Entry System) plugin through 1.7.1 for WordPress all

In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement fil

HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a

PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism. An attacker can d

LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection

The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via

SAP Adaptive Server Enterprise, version 16.0, allows an authenticated user to execute crafted database queries to elevat

The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_BS