16801 matches found
CVE-2025-7343
The SFT developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...
CVE-2025-7919
WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...
PT-2025-30610 · Rocket · Rocket Zena
Name of the Vulnerable Software and Affected Versions: Rocket Software Rocket Zena version 4.4.1.26 Description: Rocket Software Rocket Zena version 4.4.1.26 is vulnerable to SQL Injection via the filter parameter. Recommendations: At the moment, there is no information about a newer version that...
PT-2025-30567 · Komento +1 · Komento +1
Name of the Vulnerable Software and Affected Versions: Komento versions 4.0.0 through 4.0.7 Description: A SQL injection flaw exists in the Komento component for Joomla. This issue permits unprivileged users to execute arbitrary SQL commands. Recommendations: Update Komento to a version newer tha...
CVE-2025-43022
A potential SQL injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow a privileged user to execute SQL commands. HP has addressed the issue in the latest software update...
CVE-2025-43022 Poly Clariti Manager - Multiple Security Vulnerabilities
A potential SQL injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow a privileged user to execute SQL commands. HP has addressed the issue in the latest software update...
CVE-2025-43022
The vulnerability CVE-2025-43022 affects the Poly Clariti Manager prior to version 10.12.1. The issue is a potential SQL injection where a privileged user could execute SQL commands. Impact details in the sources indicate high severity with possible consequences to confidentiality, integrity, and...
CVE-2025-43022 Poly Clariti Manager - Multiple Security Vulnerabilities
A potential SQL injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow a privileged user to execute SQL commands. HP has addressed the issue in the latest software update...
WordPress WP Links Page plugin <= 4.9.6 - SQL Injection vulnerability
SQL Injection vulnerability discovered by timomangcut in WordPress Plugin WP Links Page versions = 4.9.6...
CVE-2025-4285 SQLi in Rolantis Information Technologies' Agentis
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rolantis Information Technologies Agentis allows SQL Injection. This issue affects Agentis: before 4.32...
CVE-2025-51458
A pre-authentication SQL injection vulnerability exists in DB-GPT version 0.7.0 due to improper neutralization of special elements in the editor_sql_run and query_ex functions. Remote attackers can execute arbitrary SQL statements by sending crafted input to the /v1/editor/sql/run or /v1/editor/c...
PT-2025-30397 · Rolantis Information Technologies · Agentis
Name of the Vulnerable Software and Affected Versions: Rolantis Information Technologies Agentis versions prior to 4.32 Description: The software contains an Improper Neutralization of Special Elements used in an SQL Command vulnerability, which allows for SQL Injection. Recommendations: Update...
PT-2025-30500 · Poly · Poly Clariti Manager
Name of the Vulnerable Software and Affected Versions: Poly Clariti Manager versions prior to 10.12.1 Description: A potential SQL injection issue has been identified. The issue could allow a privileged user to execute SQL commands. Recommendations: Update Poly Clariti Manager to version 10.12.1 ...
CVE-2025-7934
CVE-2025-7934 affects the fuyang_lipengjun platform, specifically the ScheduleJobController.queryPage function in platform-schedule/src/main/java/com/platform/controller/ScheduleJobController.java. The root cause is manipulation of the beanName argument, which leads to a SQL injection vulnerabili...
CVE-2025-7933 Campcodes Sales and Inventory System Setting settings_update.php sql injection
A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/settingsupdate.php of the component Setting Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated...
CVE-2025-7933 Campcodes Sales and Inventory System Setting settings_update.php sql injection
A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/settingsupdate.php of the component Setting Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated...
CVE-2025-7930 code-projects Church Donation System add_members.php sql injection
A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /members/addmembers.php. The manipulation of the argument mobile leads to sql injection. The attack can be launched...
CVE-2025-7927
A vulnerability has been found in PHPGurukul Online Banquet Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/view-user-queries.php. The manipulation of the argument viewid leads to sql injection. The attack can be initiated remotely. The...
