Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

CVEs (20,865)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-33974 1Janobe 2School Attendence Monitoring System School Event Management System Jun 17, 2026 Aug 6, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Users in '/report/printlogs.php' parameter.Show less
CVE-2024-33973 1Janobe 5Credit Card Debit Card PaymentPaypal+2 more Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Attendance' and 'YearLevel' in '/report/attendance_print.php' parameter.Show less
CVE-2024-33972 1Janobe 5Credit Card Debit Card PaymentPaypal+2 more Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'events' in '/report/event_print.php' parameter.Show less
CVE-2024-33971 1Janobe 5Credit Card Debit Card PaymentPaypal+2 more Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'username' in '/login.php' parameter.Show less
CVE-2024-33970 1Janobe 5Credit Card Debit Card PaymentPaypal+2 more Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'studid' in '/candidate/controller.php' parameter.Show less
CVE-2024-33969 1Janobe 5Credit Card Debit Card PaymentPaypal+2 more Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/AttendanceMonitoring/department/index.php' parameter.Show less
CVE-2024-33968 1Janobe 5Credit Card Debit Card PaymentPaypal+2 more Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Attendance' and 'YearLevel' in '/AttendanceMonitoring/report/index.php' parameter.Show less
CVE-2024-33967 1Janobe 5Credit Card Debit Card PaymentPaypal+2 more Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'view' in 'Attendance' and 'YearLevel' in '/AttendanceMonitoring/report/attendance_print.php' parameter.Show less
CVE-2024-33966 1Janobe 5Credit Card Debit Card PaymentPaypal+2 more Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'xtsearch' in '/admin/mod_reports/index.php' parameter.Show less
CVE-2024-33965 1Janobe 5Credit Card Debit Card PaymentPaypal+2 more Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'view' in '/tubigangarden/admin/mod_accomodation/index.php' parameter.Show less
CVE-2024-33964 1Janobe 5Credit Card Debit Card PaymentPaypal+2 more Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/admin/mod_users/index.php' parameter.Show less
CVE-2024-33963 1Janobe 5Credit Card Debit Card PaymentPaypal+2 more Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/admin/mod_room/index.php' parameter.Show less
CVE-2024-33962 1Janobe 5Credit Card Debit Card PaymentPaypal+2 more Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'code' in '/admin/mod_reservation/index.php' parameter.Show less
CVE-2024-33961 1Janobe 5Credit Card Debit Card PaymentPaypal+2 more Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'code' in '/admin/mod_reservation/controller.php' parameter.Show less
CVE-2024-33960 1Janobe 3Credit Card Debit Card PaymentPaypal Jun 17, 2026 Aug 6, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'end' in '/admin/mod_reports/printreport.php' parameter.Show less
CVE-2024-33959 1Janobe 5Credit Card Debit Card PaymentPaypal+2 more Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the inform...Show more SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'categ' in '/admin/mod_reports/printreport.php' parameter.Show less
CVE-2024-33958 1Janobe 1Young Entrepreneur E Negosyo System Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'phonenumb...Show more SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'phonenumber' in '/passwordrecover.php' parameter.Show less
CVE-2024-33957 1Janobe 1Young Entrepreneur E Negosyo System Jun 17, 2026 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'id' in '/...Show more SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'id' in '/admin/orders/controller.php' parameterShow less
CVE-2024-7505 1Rainniar 1Bike Delivery System Jun 17, 2026 Aug 6, 2024 6.9 MEDIUM· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability, which was classified as critical, was found in itsourcecode Bike Delivery System 1.0. Affected is an unknown function of the file contact_us_action.php. The manipulation of the argument name leads to sql...Show more A vulnerability, which was classified as critical, was found in itsourcecode Bike Delivery System 1.0. Affected is an unknown function of the file contact_us_action.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273648.Show less
CVE-2024-7009 1Calibre Ebook 1Calibre Jun 17, 2026 Aug 6, 2024 N/A· v4 7.1 HIGH· v3 N/A· v2 Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.

Previous 1...426427428...1044 Next