Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

DATE CVE VULNERABILITY TITLE RISK
2023-11-14 CVE-2023-47609 SQL Injection vulnerability in Oss-Calendar OSS Calendar
SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request.
network
low complexity
oss-calendar CWE-89
8.8
2023-11-13 CVE-2023-46021 SQL Injection vulnerability in Code-Projects Blood Bank 1.0
SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter.
local
low complexity
code-projects CWE-89
5.5
2023-11-13 CVE-2023-46014 SQL Injection vulnerability in Code-Projects Blood Bank 1.0
SQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'hemail' and 'hpassword' parameters.
local
low complexity
code-projects CWE-89
5.5
2023-11-13 CVE-2023-46017 SQL Injection vulnerability in Code-Projects Blood Bank 1.0
SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'remail' and 'rpassword' parameters.
local
low complexity
code-projects CWE-89
5.5
2023-11-13 CVE-2023-46018 SQL Injection vulnerability in Code-Projects Blood Bank 1.0
SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \allows attackers to run arbitrary SQL commands via 'remail' parameter.
local
low complexity
code-projects CWE-89
5.5
2023-11-10 CVE-2023-6074 SQL Injection vulnerability in PHPgurukul Restaurant Table Booking System 1.0
A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0.
network
low complexity
phpgurukul CWE-89
critical
9.8
2023-11-10 CVE-2023-39796 SQL Injection vulnerability in Wbce CMS 1.6.0
SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the DB_RECORD_TABLE parameter.
network
low complexity
wbce CWE-89
critical
9.8
2023-11-09 CVE-2021-43609 SQL Injection vulnerability in Spiceworks Help Desk Server
An issue was discovered in Spiceworks Help Desk Server before 1.3.3.
network
low complexity
spiceworks CWE-89
8.8
2023-11-07 CVE-2023-33478 SQL Injection vulnerability in Remoteclinic Remote Clinic 2.0
RemoteClinic 2.0 has a SQL injection vulnerability in the ID parameter of /medicines/stocks.php.
network
low complexity
remoteclinic CWE-89
critical
9.8
2023-11-07 CVE-2023-33479 SQL Injection vulnerability in Remoteclinic Remote Clinic 2.0
RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file.
network
low complexity
remoteclinic CWE-89
critical
9.8