← Back
CWE-89

20,840 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

JSON object

Loading...

CVEs (20,840)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-24831
1Openclinica
1Openclinica
Jun 17, 2026
May 14, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
OpenClinica is an open source software for Electronic Data Capture (EDC) and Clinical Data Management (CDM). Versions prior to 3.16.1 are vulnerable to SQL injection due to the use of string concatenation to create SQL q...Show more
OpenClinica is an open source software for Electronic Data Capture (EDC) and Clinical Data Management (CDM). Versions prior to 3.16.1 are vulnerable to SQL injection due to the use of string concatenation to create SQL queries instead of prepared statements. No known workarounds exist. This issue has been patched in 3.16.1, 3.15.9, 3.14.1, and 3.13.1 and users are advised to upgrade.Show less
CVE-2022-30417
1Covid 19 Travel Pass Management System Project
1Covid 19 Travel Pass Management System
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via ctpms/admin/?page=user/manage_user&id=.
CVE-2022-30415
1Covid 19 Travel Pass Management System Project
1Covid 19 Travel Pass Management System
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/applications/update_status.php?id=.
CVE-2022-30414
1Covid 19 Travel Pass Management System Project
1Covid 19 Travel Pass Management System
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=applications/view_application&id=.
CVE-2022-30413
1Covid 19 Travel Pass Management System Project
1Covid 19 Travel Pass Management System
Jun 17, 2026
May 13, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=delete_application.
CVE-2022-30412
1Covid 19 Travel Pass Management System Project
1Covid 19 Travel Pass Management System
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/individuals/update_status.php?id=.
CVE-2022-30411
1Covid 19 Travel Pass Management System Project
1Covid 19 Travel Pass Management System
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=individuals/view_individual&id=.
CVE-2022-30407
1Pharmacy Sales And Inventory System Project
1Pharmacy Sales And Inventory System
Jun 17, 2026
May 13, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manage_user.php?id=.
CVE-2022-30404
1College Management System Project
1College Management System
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
College Management System v1.0 is vulnerable to SQL Injection via /College_Management_System/admin/display-teacher.php?teacher_id=.
CVE-2022-30403
1Merchandise Online Store Product
1Merchandise Online Store
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=products&c=.
CVE-2022-30402
1Merchandise Online Store Project
1Merchandise Online Store
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_sub_category&id=.
CVE-2022-30401
1Merchandise Online Store Project
1Merchandise Online Store
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=view_product&id=.
CVE-2022-30400
1Merchandise Online Store Project
1Merchandise Online Store
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/orders/view_order.php?view=user&id=.
CVE-2022-30399
1Merchandise Online Store Project
1Merchandise Online Store
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_category&id=.
CVE-2022-30398
1Merchandise Online Store Project
1Merchandise Online Store
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=orders/view_order&id=.
CVE-2022-30396
1Merchandise Online Store Project
1Merchandise Online Store
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=inventory/manage_inventory&id=.
CVE-2022-30395
1Merchandise Online Store Project
1Merchandise Online Store
Jun 17, 2026
May 13, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_cart.
CVE-2022-30393
1Merchandise Online Store Project
1Merchandise Online Store
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=product/manage_product&id=.
CVE-2022-30392
1Merchandise Online Store Project
1Merchandise Online Store
Jun 17, 2026
May 13, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_sub_category.
CVE-2022-30391
1Merchandise Online Store Project
1Merchandise Online Store
Jun 17, 2026
May 13, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_category.