EUVD-2025-16990

Malicious code in bioql PyPI...

CVE-2025-54865 Tilesheets MediaWiki Extension is Vulnerable to Potential SQL Injection

Tilesheets MediaWiki Extension adds a table lookup parser function for an item and returns the requested image. A missing backtick in a query executed by the Tilesheets extension allows users to insert and potentially execute malicious SQL code. This issue has not been fixed...

CVE-2025-27753

A SQL injection vulnerability exists in the RSMediaGallery component (versions 1.7.4 through 2.1.6 ) for Joomla . The flaw is caused by the use of unescaped user-supplied parameters in SQL queries within the dashboard component . This allows an authenticated attacker to inject malicious SQL code ...

SQL Injection

@posthog/plugin-server is vulnerable to SQL Injection. The vulnerability is due to the lack of proper validation of a user-supplied string before using it to construct SQL queries, allows attackers to inject malicious SQL code and execute arbitrary commands in the context of the database account...

SQL Injection

crud-query-parser is vulnerable to SQL Injection. The vulnerability is due to improper neutralization of the order/sort parameter. Specifically, it occurs because there is no property filter setup when using the TypeORM adapter with ordering enabled, allowing an attacker to inject malicious SQL...

SQL Injection

snowflakeconnectorpython is vulnerable to SQL Injection. The vulnerability is due to improper input sanitization in a function from the snowflake.connector.pandastools module, allowing malicious SQL code to be injected and executed...

CVE-2024-57238

Prolink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to SQL Injection in in the /reqproc/procget endpoint. The vulnerability allows an attacker to manipulate SQL queries by injecting malicious SQL code into the orderby parameter...

SQL Injection

zendframework/zendframework1 is vulnerable to SQL Injection. The vulnerability is due to the improper handling of SQL expressions and comments in the ORDER BY and GROUP BY clauses. Attackers can exploit this vulnerability by injecting malicious SQL code that can alter the intended SQL query and...

PT-2024-27595

Name of the Vulnerable Software and Affected Versions Paid Memberships Pro versions 3.0.5 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

PT-2024-25846

Name of the Vulnerable Software and Affected Versions Auto Affiliate Links versions n/a through 6.4.3.1 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

PT-2024-24798

Name of the Vulnerable Software and Affected Versions Plechev Andrey WP-Recall versions through 16.26.5 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

PT-2024-24432

Name of the Vulnerable Software and Affected Versions Solwin User Activity Log Pro versions through 2.3.4 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecti...

PT-2024-23412

Name of the Vulnerable Software and Affected Versions Max Foundry Media Library Folders versions through 8.1.7 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by...

PT-2024-23285

Name of the Vulnerable Software and Affected Versions Zoho Campaigns versions through 2.0.6 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicious S...

PT-2024-21217

Name of the Vulnerable Software and Affected Versions WP Testimonials versions 1.4.3 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

SQL Injection

Cacti is vulnerable to SQL Injection. The vulnerability is due to a lack of input sanitization in pollers.php script. This allows an attacker to potentially execute malicious SQL code, resulting in a SQL injection...

PT-2023-31678

Name of the Vulnerable Software and Affected Versions RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login versions through 5.2.4.5 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an...

PT-2023-31680

Name of the Vulnerable Software and Affected Versions Aaron J 404 Solution versions 2.34.0 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

PT-2023-31679

Name of the Vulnerable Software and Affected Versions Welcart e-Commerce versions through 2.9.3 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicio...

PT-2023-31676

Name of the Vulnerable Software and Affected Versions Mail logging – WP Mail Catcher versions through 2.1.3 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by...