CVE-2026-104141

The open-source data visualization tool DataEase contains a SQL Injection vulnerability in its datasource metadata identifiers. Authenticated users with datasource access can provide crafted schema names, connection usernames, table names, or database names during metadata operations like getSche...

EUVD-2026-101608

DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata operations, including getSchema, validate, save, and update flows. CalciteProvid...

CVE-2025-50565

CVE-2025-50565 Description Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initiated by an attacker. Vulnerability Type SQL Injection Attack Type Remote Impact Information Disclosure true Has vendor confirmed true Discoverer...

CMS-Made-Simple-2.2.9-CVE-2019-9053

Disclaimer This repository provides a Python 3 compatible exploit targeting an unauthenticated SQL injection vulnerability in CMS Made Simple versions 2.2.9 and earlier. The flaw, tracked as CVE-2019-9053, allows attackers to extract sensitive administrator data, including username, hashed...

CVE-2026-55572

e107 is a content management system CMS. Prior to 2.3.7, the bundled altauth plugin's otherdb and e107db authentication backends interpolate the submitted login username directly into SQL in e107plugins/altauth/otherdbauth.php and e107plugins/altauth/e107dbauth.php. The login methods execute thos...

CVE-2026-42093

Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...

CVE-2026-55572 e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username

e107 is a content management system CMS. Prior to 2.3.7, the bundled altauth plugin's otherdb and e107db authentication backends interpolate the submitted login username directly into SQL in e107plugins/altauth/otherdbauth.php and e107plugins/altauth/e107dbauth.php. The login methods execute thos...

CVE-2026-55572 e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username

e107 is a content management system CMS. Prior to 2.3.7, the bundled altauth plugin's otherdb and e107db authentication backends interpolate the submitted login username directly into SQL in e107plugins/altauth/otherdbauth.php and e107plugins/altauth/e107dbauth.php. The login methods execute thos...

CVE-2026-55572

The e107 content management system (CMS) is vulnerable to SQL injection in versions prior to 2.3.7 . The issue exists within the bundled alt_auth plugin 's otherdb and e107db authentication backends. Specifically, the login() methods in e107_plugins/alt_auth/otherdb_auth.php and e107_plugins/alt_...

EUVD-2026-101531

e107 is a content management system CMS. Prior to 2.3.7, the bundled altauth plugin's otherdb and e107db authentication backends interpolate the submitted login username directly into SQL in e107plugins/altauth/otherdbauth.php and e107plugins/altauth/e107dbauth.php. The login methods execute thos...

CVE-2026-55572

e107 is a content management system CMS. Prior to 2.3.7, the bundled altauth plugin's otherdb and e107db authentication backends interpolate the submitted login username directly into SQL in e107plugins/altauth/otherdbauth.php and e107plugins/altauth/e107dbauth.php. The login methods execute thos...

EUVD-2026-101515

Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...

CVE-2026-42093 Redash: SQL Injection via Query Results parameterized query substitution

Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...

CVE-2026-42093 Redash: SQL Injection via Query Results parameterized query substitution

Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...

CVE-2026-42093 Redash: SQL Injection via Query Results parameterized query substitution

Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...

CVE-2026-42093

The Redash data visualization package (versions after 8.0.0 until 26.9.0 ) is vulnerable to SQL Injection in the Query Results query runner located in redash/query_runner/query_results.py. The flaw occurs because the system accepts param_query_N_{key=value} parameters and passes attacker-controll...

CVE-2026-103946

An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus...

CVE-2026-101997

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection...

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability Exploit Author: ugurkarakoc Vendor Homepage https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Software Link https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826 Overview...

EUVD-2026-101469

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection...