Base de CVEs

CVE-2026-42741 Alta · 8.5 CWE-89 12/05/2026

WordPress Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend plugin <= 3.3.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend views-for-ninja-forms allows Blind SQL Injection.This issue affects Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend: from n/a through <= 3.3.2.

CVE-2026-41125 Média · 6.0 CWE-89 12/05/2026

SQL Injection em Siemens blueplanet 100 NX3 M8

A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 GEN2 (All versions), blueplanet 110 TL3 (All versions < V3.92), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions < V3.92), blueplanet 125 TL3 GEN2 (All versions), blueplanet 137 TL3 (All versions < V3.92), blueplanet 150 TL3 (All versions < V3.92), blueplanet 150 TL3 GEN2 (All versions), blueplanet 155 TL3 (All versions < V3.92), blueplanet 155 TL3 GEN2 (All versions), blueplanet 165 TL3 (All versions < V3.92), blueplanet 165 TL3 GEN2 (All versions), blueplanet 87.0 TL3 (All versions < V3.92), blueplanet 87.0 TL3 GEN2 (All versions), blueplanet 92.0 TL3 (All versions < V3.92), blueplanet 92.0 TL3 GEN2 (All versions), blueplanet gridsave 110 TL3-S (All versions < V3.92), blueplanet gridsave 137 TL3-S (All versions < V3.92), blueplanet gridsave 92.0 TL3-S (All versions < V3.92). Improper neutralization of special elements used in an sql command ('sql injection') in KACO Meteor server allows an authorized attacker to elevate privileges over a local network.

CVE-2025-6577 Crítica · 9.8 CWE-89 12/05/2026

SQLi in Akilli Commerce's E-Commerce Website

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows SQL Injection. This issue affects E-Commerce Website: before 4.5.001.

CVE-2026-5028 Média · 6.5 CWE-89 12/05/2026

Eight Day Week Print Workflow <= 1.2.6 - Authenticated (Subscriber+) SQL Injection via 'title' Parameter

The Eight Day Week Print Workflow plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'title' parameter in the `pp-get-articles` AJAX action in all versions up to, and including, 1.2.6. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

CVE-2026-2993 Alta · 7.5 CWE-89 12/05/2026

AI Chatbot & Workflow Automation by AIWU <= 1.4.17 - Unauthenticated SQL Injection in getListForTbl()

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4.17 due to insufficient escaping on user supplied parameters and lack of sufficient preparation on the existing SQL query in the getListForTbl() function. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. NOTE: This issue is partially mitigated by a patch in version 1.4.11 that adds a nonce check for a nonce that is only available to administrators.

CVE-2026-40131 Baixa · 3.4 CWE-89 12/05/2026

SQL Injection vulnerability in SAP HANA Deployment Infrastructure (HDI) deploy library

SQL injection vulnerability exists in @sap/hdi-deploy package, where SQL queries are dynamically constructed using user input without proper parameterization or prepared statements. Successful exploitation could allow the high privileged users to alter the SELECT statements impacting confidentiality and availability of the application. There is no impact on integrity.

CVE-2026-34260 Crítica · 9.6 CWE-89 12/05/2026

Injeção de SQL (CWE-89) no SAP S/4HANA em Enterprise Search for ABAP

O SAP S/4HANA (SAP Enterprise Search for ABAP) contém uma vulnerabilidade de injeção de SQL que permite a um invasor autenticado injetar instruções SQL maliciosas por meio de entrada controlada pelo usuário. A aplicação concatena diretamente essa entrada maliciosa em consultas SQL, que são então repassadas ao banco de dados subjacente sem validação ou sanitização adequadas. Após a exploração bem-sucedida, um invasor pode obter acesso não autorizado a informações sensíveis do banco de dados e pode potencialmente travar a aplicação. Esta vulnerabilidade tem alto impacto na confidencialidade e na disponibilidade da aplicação, enquanto a integridade permanece não afetada.

CVE-2026-38567 Crítica · 9.8 CWE-89 11/05/2026

HireFlow v1.2 is vulnerable to SQL injection in the /login and /search endpoints…

HireFlow v1.2 is vulnerable to SQL injection in the /login and /search endpoints. User-supplied input is concatenated directly into SQL queries without parameterization. An unauthenticated attacker can bypass authentication by supplying a crafted username (e.g. admin'--) or extract the full contents of the database including user credentials via UNION-based injection at the /search endpoint.

CVE-2026-36962 Alta · 7.3 CWE-89 11/05/2026

SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to…

SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to compromise the entire database, achieve unauthorized administrative access, and potentially gain remote code execution by writing malicious files to the server's file system via the keyword parameter in the /index/controller/Search.php endpoint.

CVE-2026-7815 Alta · 8.8 CWE-89 11/05/2026

pgAdmin 4: SQL injection in Maintenance tool option values leading to remote code execution

SQL injection vulnerability in pgAdmin 4 Maintenance Tool. Four user-supplied JSON fields (buffer_usage_limit, vacuum_parallel, vacuum_index_cleanup, reindex_tablespace) were concatenated directly into the rendered VACUUM/ANALYZE/REINDEX command and passed to psql --command. An authenticated user with the tools_maintenance permission could break out of the option syntax and execute arbitrary SQL on the connected PostgreSQL server. The injected SQL could in turn invoke COPY ... TO PROGRAM to escalate to operating-system command execution on the database host. Fix introduces server-side allow-listing of all four fields and switches reindex_tablespace from manual quoting to the qtIdent filter. This issue affects pgAdmin 4: before 9.15.

CVE-2026-6093 Média · 6.0 CWE-89 11/05/2026

Corteza 2024.9.8 - SQL Injection in MSSQL JSON-path meta filter via incorrect T-SQL string escaping

Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend when filtering Compose records by the meta field.This issue affects corteza: 2024.9.8.

CVE-2021-47941 Alta · 8.2 CWE-89 10/05/2026

WordPress Plugin Survey & Poll 1.5.7.3 SQL Injection via sss_params

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap cookie parameter. Attackers can craft SQL payloads in the cookie to extract sensitive database information including usernames, passwords, and other confidential data from the WordPress database.

CVE-2021-47930 Alta · 8.2 CWE-89 10/05/2026

Balbooa Joomla Forms Builder 2.0.6 SQL Injection Unauthenticated

Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbitrary SQL queries. Attackers can send POST requests to the com_baforms component with malicious JSON payloads in the 'id' field parameter to extract sensitive database information.

CVE-2021-47928 Alta · 8.2 CWE-89 10/05/2026

Opencart TMD Vendor System 3.x Blind SQL Injection via product route

Opencart TMD Vendor System 3.x contains a blind SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the product_id parameter. Attackers can craft malicious SQL queries using time-based or content-based blind injection techniques to enumerate usernames, emails, and password reset codes from the oc_user table.

CVE-2025-14179 Crítica · 9.8 CWE-89 10/05/2026

SQL injection in pdo_firebird via NUL bytes in quoted strings

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird driver improperly handles NUL bytes when preparing SQL queries. During token-by-token query construction, a string token containing a NUL byte is copied via strncat(), which stops at the NUL byte, dropping the closing quote and causing subsequent SQL tokens to be interpreted as part of the string. This allows SQL injection when attacker-controlled values are quoted via PDO::quote() and embedded in SQL statements.

CVE-2026-8207 Alta · 7.0 CWE-89 09/05/2026

SQL Injection em Gibbonedu Gibbon

Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphing https://github.com/GibbonEdu/core/blob/c431e25fdc874adece5d2dc7e408e9aa2d1abadb/modules/Tracking/graphing.php#L145 feature. Successful exploitation requires Teacher or higher privileges. Exploitation could result in unintended read/write activities to the underlying database.

CVE-2026-42287 Crítica · 10.0 CWE-89 08/05/2026

Injeção de SQL no Emlog na criação e atualização de artigos

Emlog é um sistema open source para construção de sites. Antes da versão 2.6.11, uma injeção de SQL direta nas funções de criação e atualização de artigos permite que atacantes executem comandos SQL arbitrários, o que pode levar ao comprometimento completo do banco de dados, roubo de dados ou destruição do sistema. Este problema foi corrigido na versão 2.6.11.

CVE-2026-41889 Crítica · 9.8 CWE-89 08/05/2026

pgx: injeção de SQL por confusão de placeholders com literais entre aspas dólar

pgx é um driver e conjunto de ferramentas para PostgreSQL em Go. Antes da versão 5.9.2, pode ocorrer injeção de SQL quando o protocolo simples, que não é o padrão, é usado, um literal de string com aspas dólar é utilizado na consulta SQL, esse literal contém texto que seria interpretado como placeholder fora de um literal de string, e o valor desse placeholder é controlável pelo atacante. Este problema foi corrigido na versão 5.9.2.

CVE-2026-37431 Crítica · 9.8 CWE-89 08/05/2026

Beauty Parlour Management System v1.1 was discovered to contain a SQL injection…

Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.

CVE-2026-41496 Alta · 8.1 CWE-89 08/05/2026

PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)

PraisonAI is a multi-agent teams system. Prior to praisonai version 4.6.9 and praisonaiagents version 1.6.9, the fix for CVE-2026-40315 added input validation to SQLiteConversationStore only. Nine sibling backends — MySQL, PostgreSQL, async SQLite/MySQL/PostgreSQL, Turso, SingleStore, Supabase, SurrealDB — pass table_prefix straight into f-string SQL. Same root cause, same code pattern, same exploitation. 52 unvalidated injection points across the codebase. postgres.py additionally accepts an unvalidated schema parameter used directly in DDL. This issue has been patched in praisonai version 4.6.9 and praisonaiagents version 1.6.9.

CVE-2026-4935 Alta · 8.6 CWE-89 08/05/2026

SureTriggers < 1.1.23 – Unauthenticated SQLi

The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks.

CVE-2023-46453 Crítica · 9.8 CWE-89 08/05/2026

Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in...

Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in administrative control of the device) via a username that is both a valid SQL statement and a valid regular expression. For example, this affects version 4.3.7 on GL-MT3000 GL-AR300M GL-B1300 GL-AX1800 GL-AR750S GL-MT2500 GL-AXT1800 GL-X3000 and GL-SFT1200.

CVE-2024-33722 Média · 6.3 CWE-89 08/05/2026

SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with...

SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut[].

CVE-2024-33288 Alta · 7.3 Exploit público CWE-89 08/05/2026

Prison Management System Using PHP v1.0 was discovered to contain a SQL injection vulnerability...

Prison Management System Using PHP v1.0 was discovered to contain a SQL injection vulnerability via the username on the Admin login page.

CVE-2026-42208 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-89 08/05/2026

Vulnerabilidade de injeção SQL no LiteLLM (BerriAI)

O LiteLLM é um servidor proxy (AI Gateway) para chamar APIs de LLM em formato OpenAI (ou nativo). Da versão 1.81.16 até antes da versão 1.83.7, uma consulta ao banco de dados usada durante a verificação de chaves de API do proxy misturava o valor da chave fornecido pelo chamador ao texto da consulta, em vez de passá-lo como parâmetro separado. Um atacante não autenticado podia enviar um cabeçalho Authorization especialmente construído para qualquer rota de API de LLM (por exemplo POST /chat/completions) e alcançar essa consulta pelo caminho de tratamento de erros do proxy. Um atacante podia ler dados do banco de dados do proxy e talvez modificá-los, levando a acesso não autorizado ao proxy e às credenciais que ele gerencia. Este problema foi corrigido na versão 1.83.7.