An issue was discovered in Zoho ManageEngine OpManager before 12.4 build 124089. The OPMDeviceDetailsServlet servlet is prone to SQL injection. Depending on the configuration, this vulnerability could be exploited unauthenticated or authenticated. (CVSS:0.0) (Last Update:2019-10-15)

An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the _list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin&c=Ad&a=category sort parameter. (CVSS:0.0) (Last Update:2019-10-15)

tonyy dormsystem through 1.3 allows SQL Injection in admin.php. (CVSS:0.0) (Last Update:2019-10-14)

An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the admin/?n=tags&c=index&a=doSaveTags URI. (CVSS:0.0) (Last Update:2019-10-14)

An issue was discovered in idreamsoft iCMS v7.0.14. There is a spider_project.admincp.php SQL injection vulnerability in the 'upload spider project scheme' feature via a two-dimensional payload. (CVSS:0.0) (Last Update:2019-10-14)

Adhouma CMS through 2019-10-09 has SQL Injection via the post.php p_id parameter. (CVSS:0.0) (Last Update:2019-10-10)

The new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php. (CVSS:7.5) (Last Update:2019-10-10)

The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter. (CVSS:0.0) (Last Update:2019-10-10)