CWE-89
20,841 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
CVEs (20,841)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Badminton Center Management System Project 1Badminton Center Management System Jun 17, 2026 Jun 2, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_product. |
1Badminton Center Management System Project 1Badminton Center Management System Jun 17, 2026 Jun 2, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=user/manage_user&id=. |
1Badminton Center Management System Project 1Badminton Center Management System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/daily_services_report&date=. |
1Badminton Center Management System Project 1Badminton Center Management System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_court_rental_report&date=. |
1Badminton Center Management System Project 1Badminton Center Management System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_sales_report&date=. |
1Badminton Center Management System Project 1Badminton Center Management System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/services/view_service.php?id=. |
1Badminton Center Management System Project 1Badminton Center Management System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manage_service.php?id=. |
1Badminton Center Management System Project 1Badminton Center Management System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manage_product.php?id=. |
1Badminton Center Management System Project 1Badminton Center Management System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/view_court.php?id=. |
1Badminton Center Management System Project 1Badminton Center Management System Jun 17, 2026 Jun 2, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/manage_court.php?id=. |
1Badminton Center Management System Project 1Badminton Center Management System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/view_product.php?id=. |
1Badminton Center Management System Project 1Badminton Center Management System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/manage_service_transaction&id=. |
1Badminton Center Management System Project 1Badminton Center Management System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/view_details&id=. |
1Badminton Center Management System Project 1Badminton Center Management System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/manage_sale&id=. |
1Online Fire Reporting System Project 1Online Fire Reporting System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/requests/take_action.php?id=. |
1Online Fire Reporting System Project 1Online Fire Reporting System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/manage_request&id=. |
1Online Fire Reporting System Project 1Online Fire Reporting System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/view_request&id=. |
1Online Fire Reporting System Project 1Online Fire Reporting System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/view_team&id=. |
1Online Fire Reporting System Project 1Online Fire Reporting System Jun 17, 2026 Jun 2, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/manage_team&id=. |
1Online Fire Reporting System Project 1Online Fire Reporting System Jun 17, 2026 Jun 2, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_inquiry. |