Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-11-14 | CVE-2023-47609 | SQL Injection vulnerability in Oss-Calendar OSS Calendar SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request. | 8.8 |
2023-11-13 | CVE-2023-46021 | SQL Injection vulnerability in Code-Projects Blood Bank 1.0 SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter. | 5.5 |
2023-11-13 | CVE-2023-46014 | SQL Injection vulnerability in Code-Projects Blood Bank 1.0 SQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'hemail' and 'hpassword' parameters. | 5.5 |
2023-11-13 | CVE-2023-46017 | SQL Injection vulnerability in Code-Projects Blood Bank 1.0 SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'remail' and 'rpassword' parameters. | 5.5 |
2023-11-13 | CVE-2023-46018 | SQL Injection vulnerability in Code-Projects Blood Bank 1.0 SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \allows attackers to run arbitrary SQL commands via 'remail' parameter. | 5.5 |
2023-11-10 | CVE-2023-6074 | SQL Injection vulnerability in PHPgurukul Restaurant Table Booking System 1.0 A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. | 9.8 |
2023-11-10 | CVE-2023-39796 | SQL Injection vulnerability in Wbce CMS 1.6.0 SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the DB_RECORD_TABLE parameter. | 9.8 |
2023-11-09 | CVE-2021-43609 | SQL Injection vulnerability in Spiceworks Help Desk Server An issue was discovered in Spiceworks Help Desk Server before 1.3.3. | 8.8 |
2023-11-07 | CVE-2023-33478 | SQL Injection vulnerability in Remoteclinic Remote Clinic 2.0 RemoteClinic 2.0 has a SQL injection vulnerability in the ID parameter of /medicines/stocks.php. | 9.8 |
2023-11-07 | CVE-2023-33479 | SQL Injection vulnerability in Remoteclinic Remote Clinic 2.0 RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file. | 9.8 |