← Back
CWE-89

20,840 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

JSON object

Loading...

CVEs (20,840)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-30387
1Merchandise Online Store Project
1Merchandise Online Store
Jun 17, 2026
May 13, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=pay_order.
CVE-2022-30386
1Merchandise Online Store Project
1Merchandise Online Store
Jun 17, 2026
May 13, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured.
CVE-2022-30385
1Merchandise Online Store Project
1Merchandise Online Store
Jun 17, 2026
May 13, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_order.
CVE-2022-30384
1Merchandise Online Store Project
1Merchandise Online Store
Jun 17, 2026
May 13, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_inventory.
CVE-2022-30379
1Simple Social Networking Site Project
1Simple Social Networking Site
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manage_user&id=.
CVE-2022-30378
1Simple Social Networking Site Project
1Simple Social Networking Site
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=posts/view_post&id=.
CVE-2022-30376
1Simple Social Networking Site Project
1Simple Social Networking Site
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/members/view_member.php?id=.
CVE-2022-30374
1Air Cargo Management System Project
1Air Cargo Management System
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/?page=transactions/manage_transaction&id=.
CVE-2022-30373
1Air Cargo Management System Project
1Air Cargo Management System
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/manage_cargo_type.php?id=.
CVE-2022-30372
1Air Cargo Management System Project
1Air Cargo Management System
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo.
CVE-2022-30371
1Air Cargo Management System Project
1Air Cargo Management System
Jun 17, 2026
May 13, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/view_cargo_type.php?id=.
CVE-2022-30370
1Air Cargo Management System Project
1Air Cargo Management System
Jun 17, 2026
May 13, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo_type.
CVE-2022-29383
1Netgear
1Ssl312 Firmware
Jun 17, 2026
May 13, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi.
CVE-2022-30002
1Angeljudesuarez
1Insurance Management System
Jun 17, 2026
May 12, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editNominee.php?nominee_id=.
CVE-2022-30001
1Angeljudesuarez
1Insurance Management System
Jun 17, 2026
May 12, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editAgent.php?agent_id=.
CVE-2022-30000
1Angeljudesuarez
1Insurance Management System
Jun 17, 2026
May 12, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editPayment.php?recipt_no=.
CVE-2022-29999
1Angeljudesuarez
1Insurance Management System
Jun 17, 2026
May 12, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editClient.php?client_id=.
CVE-2022-29998
1Angeljudesuarez
1Insurance Management System
Jun 17, 2026
May 12, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/clientStatus.php?client_id=.
CVE-2022-29746
1Money Transfer Management System Project
1Money Transfer Management System
Jun 17, 2026
May 12, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete.
CVE-2022-29745
1Money Transfer Management System Project
1Money Transfer Management System
Jun 17, 2026
May 12, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_transaction.