CWE-89

WeGIA is a web manager for charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in the

WeGIA is a web manager for charitable institutions. An SQL Injection vulnerability was identified in the /html/funcionar

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacke

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacke

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacke

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacke

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacke

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacke

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacke

MeterSphere is an open source continuous testing platform. Prior to version 3.6.5-lts, the sortField parameter in certai

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerabi

nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteR

A SQL injection in Articles Good Search extension 1.0.0 - 1.2.4.0011 for Joomla allows attackers to execute arbitrary SQ

A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL c

WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remot

The SFT developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbi

An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (2

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bayraktar Solar En

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Moderec Tourtella

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4

LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge dev

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ncvav Virtual PBX

SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, creat

SQL Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability allows an attacker to retrieve, create, upd

A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the _domain parameter. An attacker can ma

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patient_contact parameter

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the user

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in fun

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the tx

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the app_contact parameter in a

MASA CMS is an Enterprise Content Management platform based on open source technology. Versions prior to 7.4.5, 7.3.12,

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to versio

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to versio

A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts

Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API.

The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe construction of SQL queries in

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname parameter.

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in index.php via the username parameter.

SQL Injection vulnerability in SMM Panel 3.1 allowing remote attackers to gain sensitive information via a crafted HTTP

SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL commands via

A SQL injection vulnerability exists in the St. Joe ERP system ("圣乔ERP系统") that allows unauthenticated remote attackers

FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to ins

SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirec

A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to exe

rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path.

An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, c

An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, c

An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, c

OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A r