CVE-2022-1376

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAEprivgrpHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2024-27941

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected client systems do not properly sanitize input data before sending it to the SQL server. An attacker could use this vulnerability to compromise the whole database...

CVE-2024-27940

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected systems allow any authenticated user to send arbitrary SQL commands to the SQL server. An attacker could use this vulnerability to compromise the whole database...

CVE-2024-37896

Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin = v2.6.5 has SQL injection vulnerability. The SQL injection vulnerabilities occur when a web application allows users to input data into SQL queries without sufficiently validating or sanitizing the input. Failing ...

CVE-2025-22141

WeGIA, a web manager for charitable institutions, contains a SQL injection in the /dao/verificar_recursos_cargo.php endpoint via the cargo parameter. This allows arbitrary SQL execution, with potential compromise of database confidentiality, integrity, and availability as described in CVE-2025-22...

CVE-2025-22140 WeGIA SQL Injection (Blind Time-Based) endpoint 'dependente_listar_um.php' parameter 'id_dependente'

WeGIA is a web manager for charitable institutions. A SQL Injection vulnerability was identified in the /html/funcionario/dependentelistarum.php endpoint, specifically in the iddependente parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the...

CVE-2025-22141: Improper Neutralization of Special Elements used in an SQL Command

WeGIA is a web manager for charitable institutions. A SQL Injection vulnerability was identified in the /dao/verificarrecursoscargo.php endpoint, specifically in the cargo parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity...

WeGIA SQL注入漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.2.8 that stems from the presence of a SQL injection vulnerability that allows an attacker to execute arbitrary SQL commands, thereby compromisi...

The vulnerability of the software platform for medical visualization and image processing syngo.plaza lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the software platform for medical visualization and image processing in syngo.plaza lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code to compromise the database...

CVE-2024-52335

A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF05. The affected application do not properly sanitize input data before sending it to the SQL server. This could allow an attacker with access to the application could use this vulnerability to execute malicious SQL...

CVE-2024-52335

A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF05. The affected application do not properly sanitize input data before sending it to the SQL server. This could allow an attacker with access to the application could use this vulnerability to execute malicious SQL...

CVE-2024-52335

CVE-2024-52335 affects syngo.plaza VB30E (all versions before VB30E_HF05). The issue is failure to sanitize input data before sending to the SQL server, enabling arbitrary SQL commands that could compromise the entire database. Affected software: syngo.plaza VB30E; root cause: unsanitized SQL que...

CVE-2024-52335

A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF05. The affected application do not properly sanitize input data before sending it to the SQL server. This could allow an attacker with access to the application could use this vulnerability to execute malicious SQL...

CVE-2024-52335: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF05. The affected application do not properly sanitize input data before sending it to the SQL server. This could allow an attacker with access to the application could use this vulnerability to execute malicious SQL...

CVE-2024-8309

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all data, breaches in multi-tenant securit...

Exploit for SQL Injection in Code-Projects Pharmacy_Management_System

CVE-2024-10140 The script exploits a SQL Injection vulnera...

SportsNET SQL Injection Vulnerability (CNVD-2024-37603)

SportsNET is a sports event network application from SportsNET, Inc. SportsNET suffers from a SQL injection vulnerability that can be exploited by an attacker to retrieve, update, and delete all information in the database via a specially crafted SQL query...

CVE-2024-41915

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in...

CVE-2024-41915

CVE-2024-41915 affects the web-based management interface of ClearPass Policy Manager. The vulnerability enables an authenticated remote attacker to perform SQL injection against the ClearPass Policy Manager instance, enabling viewing and modification of sensitive data in the underlying database ...

GHSA-69WX-XC6J-28V3 Admidio has Blind SQL Injection in ecard_send.php

Description: An SQL Injection has been identified in the /admprogram/modules/ecards/ecardsend.php source file of the Admidio Application. The SQL Injection results in a compromise of the application's database. The value of ecardrecipients POST parameter is being directly concatenated with the SQ...