Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

CVEs (20,876)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-35086 1J2eefast 1J2eefast Jun 17, 2026 May 23, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml .
CVE-2024-35085 1J2eefast 1J2eefast Jun 17, 2026 May 23, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDefinitionMapper.xml.
CVE-2024-35084 1J2eefast 1J2eefast Jun 17, 2026 May 23, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml.
CVE-2024-35083 1J2eefast 1J2eefast Jun 17, 2026 May 23, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.xml.
CVE-2024-35082 1J2eefast 1J2eefast Jun 17, 2026 May 23, 2024 N/A· v4 6.3 MEDIUM· v3 N/A· v2 J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml.
CVE-2024-34936 1Campcodes 1Complete Web Based School Management System Jun 17, 2026 May 23, 2024 N/A· v4 8.6 HIGH· v3 N/A· v2 A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the month parameter.
CVE-2024-34935 1Campcodes 1Complete Web Based School Management System Jun 17, 2026 May 23, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A SQL injection vulnerability in /view/conversation_history_admin.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversation_id parameter.
CVE-2024-34934 1Campcodes 1Complete Web Based School Management System Jun 17, 2026 May 23, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A SQL injection vulnerability in /view/emarks_range_grade_update_form.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversation_id paramete...Show more A SQL injection vulnerability in /view/emarks_range_grade_update_form.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversation_id parameter.Show less
CVE-2024-34933 1Campcodes 1Complete Web Based School Management System Jun 17, 2026 May 23, 2024 N/A· v4 6.3 MEDIUM· v3 N/A· v2 A SQL injection vulnerability in /model/update_grade.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the admission_fee parameter.
CVE-2024-34932 1Campcodes 1Complete Web Based School Management System Jun 17, 2026 May 23, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A SQL injection vulnerability in /model/update_exam.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.
CVE-2024-34931 1Campcodes 1Complete Web Based School Management System Jun 17, 2026 May 23, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A SQL injection vulnerability in /model/update_subject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.
CVE-2024-34930 1Campcodes 1Complete Web Based School Management System Jun 17, 2026 May 23, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A SQL injection vulnerability in /model/all_events1.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the month parameter.
CVE-2024-34929 1Campcodes 1Complete Web Based School Management System Jun 17, 2026 May 23, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A SQL injection vulnerability in /view/find_friends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the my_index parameter.
CVE-2024-34928 1Campcodes 1Complete Web Based School Management System Jun 17, 2026 May 23, 2024 N/A· v4 7.3 HIGH· v3 N/A· v2 A SQL injection vulnerability in /model/update_subject_routing.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter.
CVE-2024-34927 1Campcodes 1Complete Web Based School Management System Jun 17, 2026 May 23, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A SQL injection vulnerability in /model/update_classroom.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.
CVE-2024-4779 1Unlimited Elements 1Unlimited Elements For Elementor Jun 17, 2026 May 23, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to SQL Injection via the ‘data[post_ids][0]’ parameter in all versions up to, and including, 1.5.107 due to insuff...Show more The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to SQL Injection via the ‘data[post_ids][0]’ parameter in all versions up to, and including, 1.5.107 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.Show less
CVE-2024-5240 1Campcodes 1Complete Web Based School Management System Jun 17, 2026 May 23, 2024 5.3 MEDIUM· v4 6.5 MEDIUM· v3 6.5 MEDIUM· v2 A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unread_msg.php. The manipulation of the argu...Show more A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unread_msg.php. The manipulation of the argument my_index leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265991.Show less
CVE-2024-5239 1Campcodes 1Complete Web Based School Management System Jun 17, 2026 May 23, 2024 5.3 MEDIUM· v4 6.5 MEDIUM· v3 6.5 MEDIUM· v2 A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /view/timetable_update_form.php. The manipulatio...Show more A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /view/timetable_update_form.php. The manipulation of the argument grade leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-265990 is the identifier assigned to this vulnerability.Show less
CVE-2024-5238 1Campcodes 1Complete Web Based School Management System Jun 17, 2026 May 23, 2024 5.3 MEDIUM· v4 6.5 MEDIUM· v3 6.5 MEDIUM· v2 A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/timetable_insert_form.php. The manipulation of the...Show more A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/timetable_insert_form.php. The manipulation of the argument grade leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265989 was assigned to this vulnerability.Show less
CVE-2024-5237 1Campcodes 1Complete Web Based School Management System Jun 17, 2026 May 23, 2024 5.3 MEDIUM· v4 6.5 MEDIUM· v3 6.5 MEDIUM· v2 A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /view/timetable_grade_wise....Show more A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /view/timetable_grade_wise.php. The manipulation of the argument grade leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265988.Show less

Previous 1...450451452...1044 Next