CWE-74: Injection

This SQL injection vulnerability in SourceCodester Pet Grooming Management Software 1.0 allows remote attackers to execute arbitrary SQL commands via ...

This SQL injection vulnerability in SourceCodester Student Grading System 1.0 allows attackers to manipulate database queries through the /update_acco...

This SQL injection vulnerability in SourceCodester Student Grading System 1.0 allows attackers to manipulate database queries via the ID parameter in ...

This vulnerability allows remote attackers to execute SQL injection attacks against SourceCodester Student Grading System 1.0 via the ID parameter in ...

This SQL injection vulnerability in SourceCodester Student Grading System 1.0 allows attackers to manipulate database queries through the 'sy' paramet...

This SQL injection vulnerability in SourceCodester Student Grading System 1.0 allows remote attackers to execute arbitrary SQL commands via the 'fname...

This SQL injection vulnerability in SourceCodester Student Grading System 1.0 allows attackers to manipulate database queries through the /edit_user.p...

This vulnerability allows remote attackers to execute arbitrary commands on D-Link DIR-823x routers by injecting malicious input into the target_addr ...

This SQL injection vulnerability in SourceCodester Food Ordering Management System 1.0 allows attackers to manipulate database queries via the ticket_...

This SQL injection vulnerability in Korzh EasyQuery allows attackers to execute arbitrary SQL commands through the Query Builder UI component. It affe...

This SQL injection vulnerability in Jasmin Ransomware's handshake.php file allows remote attackers to execute arbitrary SQL commands by manipulating p...

This SQL injection vulnerability in ruoyi-go 2.1 allows attackers to manipulate database queries through the sortName parameter in the background mana...

This CVE describes a SQL injection vulnerability in ChanCMS up to version 3.3.0, specifically in the Search function's key parameter. Attackers can re...

This CVE describes a SQL injection vulnerability in HJSoft HCM Human Resources Management System. Attackers can manipulate the ID parameter in the /te...

This SQL injection vulnerability in uverif allows remote attackers to execute arbitrary SQL commands through manipulation of the 'note' parameter in t...

This SQL injection vulnerability in ChanCMS allows attackers to execute arbitrary SQL commands through the /cms/article/search endpoint by manipulatin...

This CVE describes an SQL injection vulnerability in PHPGurukul User Management System 1.0 affecting the /admin/edit-user-profile.php file. Attackers ...

This vulnerability allows remote attackers to execute arbitrary code on SimStudioAI sim servers by injecting malicious code through the 'code' paramet...

This CVE describes a SQL injection vulnerability in Portabilis i-Educar educational software versions up to 2.10. Attackers can exploit the 'ref_cod_a...

This CVE describes a command injection vulnerability in TOTOLINK X5000R routers affecting the sub_410C34 function in the cgi-bin/cstecgi.cgi file. Att...

This SQL injection vulnerability in itsourcecode Sports Management System 1.0 allows attackers to manipulate database queries through the /Admin/mode....

This CVE describes an SQL injection vulnerability in the Chemical Inventory Management System up to version 1.0. Attackers can exploit the 'chem_name'...

This SQL injection vulnerability in PHPGurukul User Management System 1.0 allows attackers to manipulate database queries through the uid parameter in...

This SQL injection vulnerability in SourceCodester Advanced School Management System 1.0 allows remote attackers to execute arbitrary SQL commands via...

This SQL injection vulnerability in SourceCodester Advanced School Management System 1.0 allows attackers to manipulate database queries through the '...

This CVE describes a SQL injection vulnerability in Portabilis i-Educar's knowledge area listing page. Attackers can exploit this by manipulating the ...

This CVE describes a SQL injection vulnerability in Portabilis i-Educar's Formula de Cálculo de Média page. Attackers can exploit the 'ID' parameter...

CVE-2025-9665 is an SQL injection vulnerability in Simple Grading System 1.0 that allows attackers to manipulate database queries through the /edit_st...

CVE-2025-9664 is an SQL injection vulnerability in Simple Grading System 1.0's admin panel that allows attackers to manipulate database queries throug...

CVE-2025-9654 is a command injection vulnerability in AiondaDotCom mcp-ssh up to version 1.0.3 that allows remote attackers to execute arbitrary comma...

CVE-2025-9607 is a SQL injection vulnerability in Portabilis i-Educar's Tabelas de Arredondamento page that allows remote attackers to execute arbitra...

This CVE describes a command injection vulnerability in Telesquare TLR-2005KSH routers version 1.2.4. Attackers can execute arbitrary commands by mani...

This vulnerability allows remote attackers to execute arbitrary commands on Comfast CF-N1 routers running firmware version 2.6.0. Attackers can exploi...

A command injection vulnerability in the ping_config function of Comfast CF-N1 firmware version 2.6.0 allows remote attackers to execute arbitrary com...

This vulnerability allows remote attackers to execute arbitrary commands on Comfast CF-N1 routers by injecting malicious input into the phy_interface ...

CVE-2025-9532 is a SQL injection vulnerability in Portabilis i-Educar educational software that allows remote attackers to execute arbitrary SQL comma...

CVE-2025-9417 is a SQL injection vulnerability in itsourcecode Apartment Management System 1.0 that allows remote attackers to execute arbitrary SQL c...

This SQL injection vulnerability in lostvip-com ruoyi-go allows attackers to manipulate database queries through the orderByColumn/isAsc parameters. I...

This CVE describes an SQL injection vulnerability in the lostvip-com ruoyi-go framework's login information service. Attackers can manipulate the 'isA...

This vulnerability allows remote attackers to execute SQL injection attacks against YiFang CMS versions up to 2.0.5 by manipulating the new_url parame...

This CVE describes a SQL injection vulnerability in Bjskzy Zhiyou ERP software up to version 11.0. Attackers can remotely exploit the getFieldValue fu...

This SQL injection vulnerability in Chat2DB's JDBC Connection Handler allows remote attackers to execute arbitrary SQL commands on the database. It af...

This SQL injection vulnerability in Shanghai Lingdang Information Technology's Lingdang CRM allows remote attackers to execute arbitrary SQL commands ...

This vulnerability allows remote attackers to execute SQL injection attacks against Simple Cafe Ordering System 1.0 through the /portal.php file. Atta...

This SQL injection vulnerability in Medical Store Management System 1.0 allows attackers to execute arbitrary SQL commands via the companyNameTxt para...

This SQL injection vulnerability in Medical Store Management System 1.0 allows attackers to manipulate database queries through the password change fu...

This SQL injection vulnerability in Medical Store Management System 1.0 allows attackers to execute arbitrary SQL commands through the searchTxt param...

This SQL injection vulnerability in Medical Store Management System 1.0 allows attackers to manipulate database queries through the productNameTxt par...

This is a critical SQL injection vulnerability in zhilink ADP Application Developer Platform 1.0.0 that allows remote attackers to execute arbitrary S...

This critical SQL injection vulnerability in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0 allows remote attackers to execute arbitra...