PT-2025-32291 · Unknown · Attendance Management System

Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to a SQL injection issue through the emailAddress parameter at the createClassTeacher.php endpoint. Recommendations: As a...

How To Find SQL Injection Vulnerabilities in WordPress Plugins and Themes

SQL Injection SQLi , a vulnerability almost as old as database-driven web applications themselves CWE-89, persists as a classic example of failing to neutralize user-supplied input before it's used in a SQL query. So why does this well-understood vulnerability type continue to exist? In the...

CVE-2025-51535

Austrian Archaeological Institute AI OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability...

PT-2025-32034 · WordPress · Filebird – Wordpress Media Library Folders & File Manager

Name of the Vulnerable Software and Affected Versions: FileBird – WordPress Media Library Folders & File Manager versions prior to 6.4.9 Description: The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress contains a SQL Injection issue due to insufficient escaping of t...

CVE-2025-54119 ADOdb's sqlite3 driver allows SQL injection

ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. In versions 5.22.9 and below, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a sqlite3 database a...

CVE-2025-54865

Tilesheets MediaWiki Extension is vulnerable to an SQL injection caused by a missing backtick in a query, enabling potentially malicious SQL execution. The issue affects the Tilesheets extension and, per the CVE records, has not been fixed. No specific affected versions or exploits are provided i...

CVE-2025-54865 Tilesheets MediaWiki Extension is Vulnerable to Potential SQL Injection

Tilesheets MediaWiki Extension adds a table lookup parser function for an item and returns the requested image. A missing backtick in a query executed by the Tilesheets extension allows users to insert and potentially execute malicious SQL code. This issue has not been fixed...

Advantive Veracore < 2025.1.1.3 SQL Injection

Advantive Veracore version prior to 2025.1.1.3 is vulnerable to SQL Injection in timeoutWarning.asp functionality, allowing attackers to execute arbitrary SQL queries via the PmSess1 parameter. No source data...

CVE-2025-50341

A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation...

CVE-2025-8470

A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /admin/deleteroom.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

The ADOdb sqlite3 driver allows SQL injection

Improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a sqlite3 database and calls the metaColumns, metaForeignKeys or metaIndexes methods with a crafted table name. Note that the indicated Severity corresponds to a...

CVE-2013-10044

An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credentials and subsequently escalate privileges. Once elevated, the attacker can exploit an unrestricted file upload flaw to achieve remote code executio...

SQL Injection

eKuiper is vulnerable to SQL Injection. The vulnerability is due to failure to sanitize user-controlled table name input in the getLast API, allowing unauthenticated attackers to execute arbitrary SQL statements...

CVE-2025-51535

Austrian Archaeological Institute AI OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability...

PT-2025-31831 · Openatlas · Openatlas

Name of the Vulnerable Software and Affected Versions: OpenAtlas version 8.11.0 Description: OpenAtlas contains a SQL injection vulnerability. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2025-50341

A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation...

PT-2025-31861 · Axelor · Axelor

Name of the Vulnerable Software and Affected Versions: Axelor version 5.2.4 Description: A Boolean-based SQL injection issue exists in Axelor version 5.2.4 through the domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data...

CVE-2025-51535

Austrian Archaeological Institute AI OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability...

CVE-2025-50341

A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation...

CVE-2025-51535

CVE-2025-51535 affects OpenAtlas v8.11.0 from Austrian Archaeological Institute. A SQL injection vulnerability is present (root cause not explicitly detailed in the documents). Impact is rated high (C/H/I/A) with CVSS v3.1 base score 9.1 (network, high risk, high privileges required, no user inte...