CWE-89

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_pa

DataEase is an open source data visualization analysis tool. Versions 2.10.20 and below contain a SQL injection vulnerab

DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection

An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQ

Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attack

EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to injec

EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to injec

In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a NoSQL injection vulnerability c

Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has a SQL Injection vulnerability, allowing

SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoin

Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module.

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 8.2.6.4 have a

ProjeQtor versions 7.0 through 12.4.3 contain an unauthenticated SQL injection vulnerability in the login functionality

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the Oracle

Kestra v1.3.3 and before is vulnerable to SQL Injection. The vulnerability occurs because user-controlled input from a G

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before ver

Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in administrative control of the device

Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber paramete

pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simp

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird

HireFlow v1.2 is vulnerable to SQL injection in the /login and /search endpoints. User-supplied input is concatenated di

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce So

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph containe

CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce So

phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha::garbageCollector() and

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core

Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder.

Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.

Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. Prior to 8.36.1, Marten's full-text search API

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.63.0, SQLChatAgent ex

Authorization bypass through User-Controlled SQL primary key vulnerability in Akmer Informatics Automation Industry and

OSNexus QuantaStor SDS Manager is vulnerable to SQL injection in the login endpoint. The username field is not properly

OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open X

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Netcad Software In

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in MOSK Information T

SQL Injection vulnerability in damasac thaipalliative_lte through version 3.0 allows remote attackers to execute arbitra

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #129, the actions/progress_video.php en

RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the code generatio

Datadog, Inc Vector v0.54.0 was discovered to contain a SQL injection vulnerability in the set_uri_query parameter in th

Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.0.0 and and ab

Bernd Bestel grocy v4.6.0 was discovered to contain a SQL injection vulnerability in the product-group parameter at /sto

Nur-Alam39 bus-ticket (no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad) contains an unauthe

claudiopizzillo PIAF-HMS (PBX-In-A-Flash Hotel Management System; no released versions, latest commit 389d2633441b65ced1

Cacti is an open source performance and fault management framework. In versions 1.2.30 and prior, the rfilter request va

Cacti is an open source performance and fault management framework. In versions 1.2.30 and prior, the rfilter request pa

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have pre-authentication SQ

The Joomla extension JoomCCK exposes a front-end controller task, that builds two SQL statements by directly concatenati

The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress (full) is vulnerable to SQL Injection via the