CWE-89
20,733 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
CVEs (20,733)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Hot Scripts Clone Project 1Hot Scripts Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter. |
1Doctor Search Script Project 1Doctor Search Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Doctor Search Script 1.0 has SQL Injection via the /list city parameter. |
1E Commerce Mlm Software Project 1E Commerce Mlm Software May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid parameter, or news_detail.php newid parameter. |
1Chartered Accountant Booking Script Project 1Chartered Accountant Booking Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter. |
1Kindergarten Elementary School Listing Script Project 1Kindergarten Elementary School Listing Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Child Care Script 1.0 has SQL Injection via the /list city parameter. |
1Cms Auditor Website Project 1Cms Auditor Website May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail. |
1Co Work Space Search Script Project 1Co Work Space Search Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter. |
1Consumer Complaints Clone Script Project 1Consumer Complaints Clone Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter. |
1Entrepreneur Bus Booking Script Project 1Entrepreneur Bus Booking Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter. |
1Advanced Real Estate Script Project 1Advanced Real Estate Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter. |
1Advance B2b Script Project 1Advance B2b Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter. |
1Cab Booking Script Project 1Cab Booking Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter. |
1Basic B2b Script Project 1Basic B2b Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter. |
1Advance Online Learning Management Script Project 1Advance Online Learning Management Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter. |
1Affiliate Mlm Script Project 1Affiliate Mlm Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter. |
1Nearbuy Clone Script Project 1Nearbuy Clone Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter. |
1Entrepreneur Job Portal Script Project 1Entrepreneur Job Portal Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter. |
1Beauty Parlour Booking Script Project 1Beauty Parlour Booking Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter. |
1Domainsale Php Script Project 1Domainsale Php Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter. |
1Website Auction Marketplace Project 1Website Auction Marketplace May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter. |