CWE-89

SugarCRM before 10.1.0 (Q3 2020) allows SQL Injection.

The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users

In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mc_project_get_users function through the A

In GLPI before version 9.5.2, there is a SQL Injection in the API's search function. Not only is it possible to break th

A vulnerability in the web UI of Cisco Cloud Web Security (CWS) could allow an authenticated, remote attacker to execute

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authentica

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Icegram Email Subscribers & News

Gambio GX before 4.0.1.0 allows SQL Injection in admin/gv_mail.php.

Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php.

In query of SmsProvider.java and MmsSmsProvider.java, there is a possible permission bypass due to SQL injection. This c

LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database

A vulnerability in the web-based management interface for Cisco SD-WAN vManage Software could allow an authenticated, re

In versions 15.0.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a vulnerability in

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection i

A vulnerability has been identified in Desigo Insight (All versions). The web service does not properly apply input vali

IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local use

Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from

A SQL injection vulnerability in the reporting component of Avaya Control Manager could allow an unauthenticated attacke

An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. A specially crafted unauthenticated HTTP request can

A SQL injection vulnerability in the WebUI component of IP Office Contact Center could allow an authenticated attacker t

An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. This would allow

An exploitable SQL injection vulnerability exists in the authenticated portion of YouPHPTube 7.6. Specially crafted web

inxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information disclosure via the deleteFaveor

An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection

SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to ex

Multiple SQL injection vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via

includes/db/class.reflines_db.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in the reference field

SQL injection vulnerability in the RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2

Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter.

In CIMTechniques CIMScan 6.x through 6.2, the SOAP WSDL parser allows attackers to execute SQL code.

An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php _data

Cleanto 5.0 has SQL Injection via the assets/lib/service_method_ajax.php service_id parameter.

Cleanto 5.0 has SQL Injection via the assets/lib/export_ajax.php id parameter.

The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the

CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature.

Hotels_Server through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter.

SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php O_id parameter.

An issue was discovered in phpMyAdmin before 4.8.5. A vulnerability was reported where a specially crafted username can

An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection v

Joomla extension DT Register version before 3.1.12 (Joomla 3.x) / 2.8.18 (Joomla 2.5) contains an SQL injection in "/ind

OPT/NET BV OPTOSS Next Gen Network Management System (NG-NetMS) version v3.6-2 and earlier versions contains a SQL Injec

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that

An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.

WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands.

An issue was discovered in baijiacms V4 that can result in time-based blind SQL injection to get data via the cate param

An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Inject

Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this para

Multiple SQL injection vulnerabilities in the monitoring feature in the HTTP API in ABBYY FlexiCapture before 12 Release

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi