Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

DATE CVE VULNERABILITY TITLE RISK
2024-11-16 CVE-2024-10645 The Blogger 301 Redirect plugin for WordPress is vulnerable to blind time-based SQL Injection via the ‘br’ parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
CWE-89
7.5
2024-11-13 CVE-2024-50970 SQL Injection vulnerability in Nikoarroyocuraza Online Furniture Shopping Project 1.0
A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
network
low complexity
nikoarroyocuraza CWE-89
8.8
2024-11-13 CVE-2024-50971 SQL Injection vulnerability in Angeljudesuarez Construction Management System 1.0
A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter.
network
low complexity
angeljudesuarez CWE-89
7.2
2024-11-13 CVE-2024-50972 SQL Injection vulnerability in Angeljudesuarez Construction Management System 1.0
A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter.
network
low complexity
angeljudesuarez CWE-89
7.2
2024-11-12 CVE-2024-11127 SQL Injection vulnerability in Anisha JOB Recruitment 1.0
A vulnerability was found in code-projects Job Recruitment up to 1.0.
network
low complexity
anisha CWE-89
8.8
2024-11-12 CVE-2024-11124 SQL Injection vulnerability in Timgeyssens Ui-O-Matic
A vulnerability has been found in TimGeyssens UIOMatic 5 and classified as critical.
network
low complexity
timgeyssens CWE-89
7.2
2024-11-12 CVE-2024-11099 SQL Injection vulnerability in Anisha JOB Recruitment 1.0
A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical.
network
low complexity
anisha CWE-89
critical
9.8
2024-11-11 CVE-2024-11077 SQL Injection vulnerability in Anisha JOB Recruitment 1.0
A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0.
network
low complexity
anisha CWE-89
critical
9.8
2024-11-11 CVE-2024-11074 SQL Injection vulnerability in Angeljudesuarez Tailoring Management System 1.0
A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0.
network
low complexity
angeljudesuarez CWE-89
critical
9.8
2024-11-11 CVE-2024-11076 SQL Injection vulnerability in Anisha JOB Recruitment 1.0
A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0.
network
low complexity
anisha CWE-89
critical
9.8