SQL injection in pgAdmin 4's named restore point endpoint (POST /browser/server/restore_point/{gid}/{sid}). The user-supplied 'value' field was interpolated directly into the SQ...

CVE-2026-12050

pgAdmin 4 的命名还原点端点（POST /browser/server/restore_point/{gid}/{sid}）存在 SQL 注入漏洞。用户提供的 'value' 字段通过 Python str.format() 直接拼

历史摘要 · 未重新核验 · NVD

Read-only transaction bypass in the pgAdmin 4 AI Assistant allows an attacker who can influence database content that the assistant reads to execute arbitrary SQL with the privi...

CVE-2026-12045

pgAdmin 4 的 AI Assistant 功能存在只读事务绕过漏洞（CVE-2026-12045）。该功能的 execute_sql_query 工具原本会将 LLM 生成的 SQL 语句包裹在 BEGIN TRANSACTION

历史摘要 · 未重新核验 · NVD

SQL injection in pgAdmin 4 across every dialog template that renders ``COMMENT ON ... IS '<description>'`` for a user-supplied description field. The Jinja templates for Domains...

CVE-2026-12044

pgAdmin 4 1.0 至 9.16 之前版本中存在多处 SQL 注入漏洞。漏洞源于在多个对话框模板（域、外键表、语言、事件触发器以及视图 OID 查询）中，Jinja 模板直接使用单引号包裹用户提供的描述字段（例如 `'{{ data

历史摘要 · 未重新核验 · NVD

budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL

### Summary This advisory covers three distinct SQL Injection vulnerabilities within Budibase's database connectors (Pos

历史摘要 · 未重新核验 · GitHub Advisory

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-56012

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Medi

历史摘要 · 未重新核验 · GitHub Advisory

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows Blind SQL Injection. This iss...

CVE-2026-56012

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Medi

历史摘要 · 未重新核验 · NVD

claudiopizzillo PIAF-HMS (PBX-In-A-Flash Hotel Management System; no released versions, latest commit 389d2633441b65ced1c104212cd62be2bfca21e5) contains multiple unauthenticated...

CVE-2026-54419

claudiopizzillo PIAF-HMS (PBX-In-A-Flash Hotel Management System; no released versions, latest commit 389d2633441b65ced1

历史摘要 · 未重新核验 · NVD

UBB.threads is vulnerable to Blind SQL Injection, allowing attackers with access to the Members in Control Panel to interact with the underlying database. Due to insufficient in...

CVE-2026-54222

UBB.threads is vulnerable to Blind SQL Injection, allowing attackers with access to the Members in Control Panel to inte

历史摘要 · 未重新核验 · NVD

An SQL Injection vulnerability exists in LMS (LAN Management System) before commit 4cb30a7 within the "tarifflist.php" module due to insufficient sanitization of the POST "tg[]"...

CVE-2026-40455

An SQL Injection vulnerability exists in LMS (LAN Management System) before commit 4cb30a7 within the "tarifflist.php" m

历史摘要 · 未重新核验 · NVD

Nur-Alam39 bus-ticket (no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad) contains an unauthenticated SQL injection vulnerability in bus_info.php. The...

CVE-2026-55740

Nur-Alam39 bus-ticket (no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad) contains an unauthe

历史摘要 · 未重新核验 · NVD

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'name' parameter in all versions u...

CVE-2026-11777

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to generic

历史摘要 · 未重新核验 · NVD

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'groupids' parameter in all versio...

CVE-2026-11776

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to generic

历史摘要 · 未重新核验 · NVD

The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'sort_direction' parameter in all versions up to, and including, 4....

CVE-2026-11360

The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'sort_dire

历史摘要 · 未重新核验 · NVD

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to generic SQL Injection via the 'data' parameter in all versions up to, and including, 3...

CVE-2026-10736

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to generic SQL Injection via the

历史摘要 · 未重新核验 · NVD

LangChain4j: SQL injection via metadata filters in langchain4j-mariadb and langchain4j-pgvector

CVE-2026-55405

### Summary The MariaDB and pgvector embedding stores build metadata-filter SQL by string-concatenating filter **keys**

历史摘要 · 未重新核验 · GitHub Advisory

Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Neutralization of Special...

CVE-2026-35068

Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Neutralization of Special Elements used in an SQL

历史摘要 · 未重新核验 · GitHub Advisory

Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Neutralization of Special...

CVE-2026-35069

Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Neutralization of Special Elements used in an SQL

历史摘要 · 未重新核验 · GitHub Advisory

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-54812

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Mot

历史摘要 · 未重新核验 · GitHub Advisory

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-54815

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cargo RD Cargo Shi

历史摘要 · 未重新核验 · GitHub Advisory

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-54808

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Trave

历史摘要 · 未重新核验 · GitHub Advisory