CWE-89
20,733 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
CVEs (20,733)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Realestate Crowdfunding Script Project 1Realestate Crowdfunding Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter. |
1Stackoverflow Clone Project 1Stackoverflow Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter. |
1Thumbtack Clone Project 1Thumbtack Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter. |
1Imdb Clone Project 1Imdb Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id parameter. |
1Indiamart Clone Project 1Indiamart Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter. |
1Olx Clone Project 1Olx Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter. |
1Monster Clone Project 1Monster Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter. |
1Makemytrip Clone Project 1Makemytrip Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter. |
1Shutterstock Clone Project 1Shutterstock Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter. |
1Grubhub Clone Project 1Grubhub Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter. |
1Quibids Clone Project 1Quibids Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter. |
1Linkedin Clone Project 1Linkedin Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter. |
1Freelancer Clone Project 1Freelancer Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter. |
1Crowdfunding Script Project 1Crowdfunding Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter. |
1Trademe Clone Project 1Trademe Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id parameter. |
1Gigs Script Project 1Gigs Script May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or service-provider.php ser parameter. |
1Groupon Clone Project 1Groupon Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter. |
1Care Clone Project 1Care Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter. |
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter. |
1Amazon Clone Project 1Amazon Clone May 13, 2026 Dec 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari. |