FUXA <= 1.1.12 - Unauthenticated SQL Injection

FUXA = 1.1.12 contains a SQL injection caused by unsanitized input in /api/signin, letting attackers execute arbitrary SQL commands, exploit requires sending crafted input to the endpoint. id: CVE-2023-31719 info: name: FUXA = 1.1.12 - Unauthenticated SQL Injection author: Securin severity:...

Zabbix - SQL Injection

Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...

TurboMeeting - Boolean-based SQL Injection

A Boolean-based SQL injection vulnerability in the "RHUB TurboMeeting" web application. This vulnerability could allow an attacker to execute arbitrary SQL commands on the database server, potentially allowing them to access sensitive data or compromise the server. id: CVE-2024-38289 info: name:...

USN-7530-2: ADOdb vulnerability

USN-7530-1 fixed a vulnerability in ADOdb. This update provides the corresponding updates for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. Original advisory details: It was discovered that ADOdb incorrectly handled SQL input. A remote attacker coul...

CVE-2023-50070

CVE-2023-50070 Customer Support System 1.0 - Multiple SQL injection vulnerabilities - saveticket Description : Multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket in Customer Support System 1.0 allow authenticated attackers to execute arbitrary SQL commands via...

CVE-2021-24741

CVE-2021-24741 Multiple SQL Injection Unauthenticated in Support Board v 3.3.3 Description Support Board V 3.3.3 Multiple SQL Injection Vulnerability in Support Board Version 3.3.3 that allow remote unauthenticated attacker to execute arbitrary SQL commands via statuscode, department, userid,...

CVE-2024-40443

CVE-2024-40443 CVE-2024-40443 - A SQL Injection vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary SQL commands...

CVE-2024-34222

Human Resource Management System 1.0 Submitter: Kha Do Vulnerability SQL injection Description SQL injection vulnerability in /hrm/country.php in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the searccountry parameters. Affected compone...

CVE-2026-103092

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control...

CVE-2026-103092

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control...

EUVD-2026-113153

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control...

CVE-2026-103092 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control...

CVE-2026-103092

IBM Langflow OSS versions 1.0.0 through 1.12.3 are affected by CVE-2026-103092 , which allows a remote authenticated attacker to execute arbitrary SQL commands due to improper access control (CWE-284). This vulnerability carries a CVSS base score of 8.5. To remediate this issue, IBM strongly reco...

CVE-2026-103092 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control...

CVE-2026-103092

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control...

CVE-2026-103092: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due…

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control...

PT-2026-132204

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control...

IBM Langflow OSS permission and access control issue vulnerability

Versions 1.0.0 through 1.12.3 of IBM Langflow OSS contain a vulnerability related to permission and access control issues. This vulnerability stems from improper access control and may allow remotely authenticated attackers to execute arbitrary SQL commands...

Adobe Campaign Classic SQL injection vulnerability

Adobe Campaign Classic versions 7.4.4 build 9402 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially allowing attackers to execute arbitrary SQL commands. Such actions may result in privilege...

baserproject baserCMS SQL injection vulnerability

BaserProject baserCMS versions prior to 5.0.0 and 5.3.2, as well as versions prior to 5.4.0 and 5.4.2, contain an SQL injection vulnerability. This vulnerability arises because list and detail operations in Admin and Api/Admin prefixes include request query parameters such as contain, conditions,...