Budibase: MySQL DESCRIBE Backtick Injection via multipleStatements in Database Connector
CVE-2026-73408
Budibase is an open-source low-code platform. Prior to 3.39.18, packages/server/src/integrations/mysql.ts enabled multip
#cwe-89
共收录 2545 条相关情报。
← 返回所有主题Budibase before 3.40.0 SQL Injection via Unauthenticated Webhook
CVE-2026-72851
Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered automations with EXE
FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover
CVE-2026-73663
FreePBX is an open source IP PBX. From 16.0.0 until 16.0.11 and 17.0.4, the FreePBX missedcall module places the inbound
IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or del...
CVE-2026-16961
IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, wh
Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows remote unauthenticated attackers to access protected resou...
CVE-2024-58374
Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows r
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parame...
CVE-2019-25765
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attack
SQL injection in the Zalktis accounting application via trading-partner-controlled text fields in received electronic invoices. When importing a received e-invoice (UBL/PEPPOL) ...
CVE-2026-59109
SQL injection in the Zalktis accounting application via trading-partner-controlled text fields in received electronic in
A CMS contains a SQL injection vulnerability in admin/db_data.php at line 509 that allows authenticated administrators to inject arbitrary SQL into a SHOW COLUMNS FROM statement...
CVE-2026-73670
A CMS contains a SQL injection vulnerability in admin/db_data.php at line 509 that allows authenticated administrators t
A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/view_...
CVE-2026-19710
A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unkn
Administrator SQL Injection in MailChimp For WooCommerce < 6.2 versions.
CVE-2026-73346
Administrator SQL Injection in MailChimp For WooCommerce < 6.2 versions.
Subscriber SQL Injection in Reviewer <= 3.14.2 versions.
CVE-2026-66658
Subscriber SQL Injection in Reviewer <= 3.14.2 versions.
Unauthenticated SQL Injection in Church Admin <= 5.1.1 versions.
CVE-2026-66478
Unauthenticated SQL Injection in Church Admin <= 5.1.1 versions.
Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.
CVE-2026-66472
Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.
Unauthenticated SQL Injection in RealPress <= 1.1.2 versions.
CVE-2026-66458
Unauthenticated SQL Injection in RealPress <= 1.1.2 versions.
Subscriber SQL Injection in If-So Dynamic Content Personalization <= 1.10 versions.
CVE-2026-66446
Subscriber SQL Injection in If-So Dynamic Content Personalization <= 1.10 versions.
Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.
CVE-2026-66436
Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.
Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.
CVE-2026-66430
Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.
Unauthenticated SQL Injection in Listdom <= 5.6.0 versions.
CVE-2026-61969
Unauthenticated SQL Injection in Listdom <= 5.6.0 versions.
Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions.
CVE-2026-61966
Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions.
Subscriber SQL Injection in Form Maker by 10Web <= 1.15.44 versions.
CVE-2026-28184
Subscriber SQL Injection in Form Maker by 10Web <= 1.15.44 versions.