CWE-89
20,840 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
CVEs (20,840)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Money Transfer Management System Project 1Money Transfer Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_fee. |
1Money Transfer Management System Project 1Money Transfer Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manage_user&id=. |
1Money Transfer Management System Project 1Money Transfer Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id. |
IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the id_page parameter in application/models/article_model.php. |
1Ibm 1Robotic Process Automation Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete infor...Show more |
1Online Sports Complex Booking System Project 1Online Sports Complex Booking System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=. |
1Online Sports Complex Booking System Project 1Online Sports Complex Booking System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/manage_facility&id=. |
1Online Sports Complex Booking System Project 1Online Sports Complex Booking System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/view_booking.php?id=. |
1Online Sports Complex Booking System Project 1Online Sports Complex Booking System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/manage_category.php?id=. |
1Online Sports Complex Booking System Project 1Online Sports Complex Booking System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/view_category.php?id=. |
1Online Sports Complex Booking System Project 1Online Sports Complex Booking System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking. |
1Online Sports Complex Booking System Project 1Online Sports Complex Booking System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete. |
1Online Sports Complex Booking System Project 1Online Sports Complex Booking System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=. |
1Online Sports Complex Booking System Project 1Online Sports Complex Booking System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility. |
1Online Sports Complex Booking System Project 1Online Sports Complex Booking System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_category. |
1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=. |
1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=. |
1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=. |
1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete. |
1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=. |