Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

DATE CVE VULNERABILITY TITLE RISK
2022-11-30 CVE-2022-44295 SQL Injection vulnerability in Sanitization Management System Project Sanitization Management System 1.0
Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assign_team.php?id=.
7.2
2022-11-30 CVE-2022-44296 SQL Injection vulnerability in Sanitization Management System Project Sanitization Management System 1.0
Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manage_remark.php?id=.
7.2
2022-11-30 CVE-2022-44151 SQL Injection vulnerability in Sanitization Management System Project Sanitization Management System 1.0
Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php.
network
low complexity
sanitization-management-system-project CWE-89
critical
9.8
2022-11-30 CVE-2022-4222 SQL Injection vulnerability in Canteen Management System Project Canteen Management System 1.0
A vulnerability was found in SourceCodester Canteen Management System.
network
low complexity
canteen-management-system-project CWE-89
critical
9.8
2022-11-30 CVE-2022-45328 SQL Injection vulnerability in Church Management System Project Church Management System 1.0
Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_members.php.
network
low complexity
church-management-system-project CWE-89
7.2
2022-11-29 CVE-2022-3751 SQL Injection vulnerability in Owncast Project Owncast
SQL Injection in GitHub repository owncast/owncast prior to 0.0.13.
network
low complexity
owncast-project CWE-89
critical
9.8
2022-11-29 CVE-2022-45329 SQL Injection vulnerability in Aerocms Project Aerocms 0.0.1
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter.
network
low complexity
aerocms-project CWE-89
7.5
2022-11-29 CVE-2022-42109 SQL Injection vulnerability in Online-Shopping-System-Advanced Project Online-Shopping-System-Advanced 1.0
Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php.
network
low complexity
online-shopping-system-advanced-project CWE-89
critical
9.8
2022-11-28 CVE-2022-44399 SQL Injection vulnerability in Poultry Farm Management System Project Poultry Farm Management System 1.0
Poultry Farm Management System v1.0 contains a SQL injection vulnerability via the del parameter at /Redcock-Farm/farm/category.php.
network
low complexity
poultry-farm-management-system-project CWE-89
critical
9.8
2022-11-28 CVE-2022-3768 SQL Injection vulnerability in Wpsmartcontracts
The WPSmartContracts WordPress plugin before 1.3.12 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as author
network
low complexity
wpsmartcontracts CWE-89
8.8