Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

CVEs (20,868)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-3789 1Tim Campus Confession Wall Project 1Tim Campus Confession Wall Jun 17, 2026 Nov 1, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A vulnerability has been found in Tim Campus Confession Wall and classified as critical. Affected by this vulnerability is an unknown functionality of the file share.php. The manipulation of the argument post_id leads to...Show more A vulnerability has been found in Tim Campus Confession Wall and classified as critical. Affected by this vulnerability is an unknown functionality of the file share.php. The manipulation of the argument post_id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212611.Show less
CVE-2022-43355 1Sanitization Management System Project 1Sanitization Management System Jun 17, 2026 Nov 1, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_service.
CVE-2022-43354 1Sanitization Management System Project 1Sanitization Management System Jun 17, 2026 Nov 1, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/manage_request.
CVE-2022-43353 1Sanitization Management System Project 1Sanitization Management System Jun 17, 2026 Nov 1, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.
CVE-2022-3059 1Schoolbox 1Schoolbox Jun 17, 2026 Oct 31, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 The application was vulnerable to multiple instances of SQL injection (authenticated and unauthenticated) through a vulnerable parameter. Due to the stacked query support, complex SQL commands could be crafted and injec...Show more The application was vulnerable to multiple instances of SQL injection (authenticated and unauthenticated) through a vulnerable parameter. Due to the stacked query support, complex SQL commands could be crafted and injected into the vulnerable parameter and using a sleep based inferential SQL injection it was possible to extract data from the database. Show less
CVE-2022-42924 1Formalms 1Formalms Jun 17, 2026 Oct 31, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker (with the role of student) to perform a SQL injectio...Show more Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker (with the role of student) to perform a SQL injection on the 'dyn_filter' parameter in the 'appLms/ajax.adm_server.php?r=widget/userselector/getusertabledata' function in order to dump the entire database.Show less
CVE-2022-42923 1Formalms 1Formalms Jun 17, 2026 Oct 31, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker (with the role of student) to perform a SQL injectio...Show more Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker (with the role of student) to perform a SQL injection on the 'id' parameter in the 'appCore/index.php?r=adm/mediagallery/delete' function in order to dump the entire database or delete all contents from the 'core_user_file' table.Show less
CVE-2022-41680 1Formalms 1Formalms Jun 17, 2026 Oct 31, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker (with the role of student) to perform a SQL injectio...Show more Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker (with the role of student) to perform a SQL injection on the 'search[value] parameter in the appLms/ajax.server.php?r=mycertificate/getMyCertificates' function in order to dump the entire database.Show less
CVE-2022-3254 1Strategy11 1Awp Classifieds Jun 17, 2026 Oct 31, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a spe...Show more The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injectionShow less
CVE-2022-43233 1Canteen Management System Project 1Canteen Management System Jun 17, 2026 Oct 28, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid parameter at /php_action/fetchSelectedUser.php.
CVE-2022-43232 1Canteen Management System Project 1Canteen Management System Jun 17, 2026 Oct 28, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid parameter at /php_action/fetchOrderData.php.
CVE-2022-43230 1Simple Cold Storage Management System Project 1Simple Cold Storage Managment System Jun 17, 2026 Oct 28, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=bookings/view_details.
CVE-2022-43229 1Simple Cold Storage Management System Project 1Simple Cold Storage Managment System Jun 17, 2026 Oct 28, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /bookings/update_status.php.
CVE-2022-43228 1Barangay Management System Project 1Barangay Management System Jun 17, 2026 Oct 28, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /clearance/clearance.php.
CVE-2021-36898 1Expresstech 1Quiz And Survey Master Jun 17, 2026 Oct 28, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 Auth. SQL Injection (SQLi) vulnerability in Quiz And Survey Master plugin <= 7.3.4 on WordPress.
CVE-2022-43168 1Rukovoditel 1Rukovoditel Jun 17, 2026 Oct 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reports_id parameter.
CVE-2021-38733 1Sem Cms 1Semcms Jun 17, 2026 Oct 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php.
CVE-2021-38732 1Sem Cms 1Semcms Jun 17, 2026 Oct 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php.
CVE-2021-38731 1Sem Cms 1Semcms Jun 17, 2026 Oct 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php.
CVE-2021-38730 1Sem Cms 1Semcms Jun 17, 2026 Oct 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php.

Previous 1...617618619...1044 Next