CWE-89
20,860 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
CVEs (20,860)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Hashenudara 1Edoc Doctor Appointment System Jun 17, 2026 Aug 26, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/doctors.php. |
Kensite CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities via the name and oldname parameters at /framework/mod/db/DBMapper.xml. |
1Online Diagnostic Lab Management System Project 1Online Diagnostic Lab Management System Jun 17, 2026 Aug 26, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=save_client" |
1Simple Task Scheduling System Project 1Simple Task Scheduling System Jun 17, 2026 Aug 26, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_payment. |
1Simple Task Scheduling System Project 1Simple Task Scheduling System Jun 17, 2026 Aug 26, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_student. |
1Simple Task Scheduling System Project 1Simple Task Scheduling System Jun 17, 2026 Aug 26, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_account. |
1Simple Task Scheduling System Project 1Simple Task Scheduling System Jun 17, 2026 Aug 26, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_schedule. |
1Simple Task Scheduling System Project 1Simple Task Scheduling System Jun 17, 2026 Aug 26, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user. |
1Simple Task Scheduling System Project 1Simple Task Scheduling System Jun 17, 2026 Aug 26, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_category. |
1Library Management System Project 1Library Management System Jun 17, 2026 Aug 25, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Textbook parameter at /admin/modify.php. |
1Library Management System Project 1Library Management System Jun 17, 2026 Aug 25, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/modify1.php. |
1Library Management System Project 1Library Management System Jun 17, 2026 Aug 25, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the ok parameter at /admin/history.php. |
1Library Management System Project 1Library Management System Jun 17, 2026 Aug 25, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/changestock.php. |
1Library Management System Project 1Library Management System Jun 17, 2026 Aug 25, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php. |
1Ingredients Stock Management System Project 1Ingredients Stock Management System Jun 17, 2026 Aug 25, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_waste. |
1Ingredients Stock Management System Project 1Ingredients Stock Management System Jun 17, 2026 Aug 25, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_stockout. |
1Ingredients Stock Management System Project 1Ingredients Stock Management System Jun 17, 2026 Aug 25, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_stockin. |
1Ingredients Stock Management System Project 1Ingredients Stock Management System Jun 17, 2026 Aug 25, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_item. |
1Ingredients Stock Management System Project 1Ingredients Stock Management System Jun 17, 2026 Aug 25, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_category. |
A SQL injection vulnerability in license_update.php in Mumara Classic through 2.93 allows a remote unauthenticated attacker to execute arbitrary SQL commands via the license parameter. |