Search Vulnerabilities

Insufficient sanitization of SQL queries in the `sqloptimizer` utility script allows SQL Injections on behalf of the root user if Slow Query loggin...

ERPNext: Possibility of SQL Injection due to missing validation

ERPNext: Possibility of SQL Injection due to missing validation

Incomplete fix for CVE-2026-35184: SQL Injection in phili67/ecclesiacrm

MISP: SQL injection via unvalidated ordering parameters in event and shadow attribute listings

CubeCart: Authenticated SQL Injection via `sort[]` Parameter in Admin Orders Transactions Listing

CubeCart: Time-based Blind SQL Injection

Flight: SQL Injection via unvalidated identifiers in SimplePdo::insert / update / delete

Trust Protection Foundation: SQL Injection Vulnerability

CKAN: Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`

Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby

Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby

Joomla com_hdwplayer 4.2 SQL Injection via search.php

ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter

Avada Builder <= 3.15.1 - Unauthenticated SQL Injection via 'product_order' Parameter

JoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' Parameter

Charitable <= 1.8.10.4 - Authenticated (Custom+) SQL Injection via 's' Search Parameter

Court Reservation – Manage Your Court Bookings Online <= 1.10.11 - Unauthenticated SQL Injection

Shelf: SQL Injection via sortBy Parameter

An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7