Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-14 | CVE-2024-11212 | SQL Injection vulnerability in Mayurik Best Employee Management System 1.0 A vulnerability, which was classified as critical, has been found in SourceCodester Best Employee Management System 1.0. | 8.8 |
| 2024-11-13 | CVE-2024-50970 | SQL Injection vulnerability in Nikoarroyocuraza Online Furniture Shopping Project 1.0 A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. | 8.8 |
| 2024-11-13 | CVE-2024-50971 | SQL Injection vulnerability in Angeljudesuarez Construction Management System 1.0 A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter. | 7.2 |
| 2024-11-13 | CVE-2024-50972 | SQL Injection vulnerability in Angeljudesuarez Construction Management System 1.0 A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter. | 7.2 |
| 2024-11-12 | CVE-2024-50323 | SQL Injection vulnerability in Ivanti Endpoint Manager SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. | 7.8 |
| 2024-11-12 | CVE-2024-50326 | SQL Injection vulnerability in Ivanti Endpoint Manager SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. | 7.2 |
| 2024-11-12 | CVE-2024-50327 | SQL Injection vulnerability in Ivanti Endpoint Manager SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. | 7.2 |
| 2024-11-12 | CVE-2024-50328 | SQL Injection vulnerability in Ivanti Endpoint Manager SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. | 7.2 |
| 2024-11-12 | CVE-2024-11127 | SQL Injection vulnerability in Anisha JOB Recruitment 1.0 A vulnerability was found in code-projects Job Recruitment up to 1.0. | 8.8 |
| 2024-11-12 | CVE-2024-11124 | SQL Injection vulnerability in Timgeyssens Ui-O-Matic A vulnerability has been found in TimGeyssens UIOMatic 5 and classified as critical. | 7.2 |