← Back
CWE-89

20,860 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

JSON object

Loading...

CVEs (20,860)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-36714
1Library Management System Project
1Library Management System
Jun 17, 2026
Aug 30, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /staff/lab.php.
CVE-2022-36713
1Library Management System Project
1Library Management System
Jun 17, 2026
Aug 30, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /librarian/lab.php.
CVE-2022-36712
1Library Management System Project
1Library Management System
Jun 17, 2026
Aug 30, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/studentdetails.php.
CVE-2022-36711
1Library Management System Project
1Library Management System
Jun 17, 2026
Aug 30, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/bookdetails.php.
CVE-2022-36709
1Library Management System Project
1Library Management System
Jun 17, 2026
Aug 30, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/edit_book_details.php.
CVE-2022-2559
1Wpmanageninja
1Fluent Support
Jun 17, 2026
Aug 29, 2022
N/A· v4
7.2 HIGH· v3
N/A· v2
The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high pri...Show more
The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege usersShow less
CVE-2022-1123
1Mapsmarker
1Leaflet Maps Marker
Jun 17, 2026
Aug 29, 2022
N/A· v4
7.2 HIGH· v3
N/A· v2
The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could pe...Show more
The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks.Show less
CVE-2022-36690
1Ingredient Stock Management System Project
1Ingredient Stock Management System
Jun 17, 2026
Aug 29, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user&id=.
CVE-2022-36689
1Ingredient Stock Management System Project
1Ingredient Stock Management System
Jun 17, 2026
Aug 29, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/waste&month=.
CVE-2022-36688
1Ingredient Stock Management System Project
1Ingredient Stock Management System
Jun 17, 2026
Aug 29, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockout&month=.
CVE-2022-36686
1Ingredient Stock Management System Project
1Ingredient Stock Management System
Jun 17, 2026
Aug 29, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockin&month=.
CVE-2022-22897
1Apollotheme
1Ap Pagebuilder
Jun 17, 2026
Aug 29, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data.
CVE-2022-36708
1Library Management System Project
1Library Management System
Jun 17, 2026
Aug 28, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /student/bookdetails.php.
CVE-2022-36706
1Ingredients Stock Management System Project
1Ingredients Stock Management System
Jun 17, 2026
Aug 28, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /stocks/manage_stockout.php.
CVE-2022-36705
1Ingredients Stock Management System Project
1Ingredients Stock Management System
Jun 17, 2026
Aug 28, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /stocks/manage_waste.php.
CVE-2022-36704
1Library Management System Project
1Library Management System
Jun 17, 2026
Aug 28, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /librarian/studentdetails.php.
CVE-2022-3013
1Simple Task Managing System Project
1Simple Task Managing System
Jun 17, 2026
Aug 27, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the file /loginVaLidation.php. The manipulation of the argument login leads to sql inje...Show more
A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the file /loginVaLidation.php. The manipulation of the argument login leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-207423.Show less
CVE-2022-3012
1Fast Food Ordering System Project
1Fast Food Ordering System
Jun 17, 2026
Aug 27, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
A vulnerability was found in oretnom23 Fast Food Ordering System. It has been rated as critical. Affected by this issue is some unknown functionality of the file ffos/admin/reports/index.php. The manipulation of the argu...Show more
A vulnerability was found in oretnom23 Fast Food Ordering System. It has been rated as critical. Affected by this issue is some unknown functionality of the file ffos/admin/reports/index.php. The manipulation of the argument date leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-207422 is the identifier assigned to this vulnerability.Show less
CVE-2022-36545
1Hashenudara
1Edoc Doctor Appointment System
Jun 17, 2026
Aug 26, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/settings.php.
CVE-2022-36544
1Hashenudara
1Edoc Doctor Appointment System
Jun 17, 2026
Aug 26, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/booking.php.