Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

DATE CVE VULNERABILITY TITLE RISK
2022-07-01 CVE-2021-32428 SQL Injection vulnerability in Viaviweb Ebook 10
SQL Injection vulnerability in viaviwebtech Android EBook App (Books App, PDF, ePub, Online Book Reading, Download Books) 10 via the author_id parameter to api.php.
network
low complexity
viaviweb CWE-89
critical
9.8
2022-06-30 CVE-2017-20124 SQL Injection vulnerability in Bestsoftinc Online Hotel Booking System 1.0
A vulnerability classified as critical has been found in Online Hotel Booking System Pro Plugin 1.0.
network
low complexity
bestsoftinc CWE-89
8.8
2022-06-30 CVE-2017-20125 SQL Injection vulnerability in Bestsoftinc Online Hotel Booking System 1.2
A vulnerability classified as critical was found in Online Hotel Booking System Pro 1.2.
network
low complexity
bestsoftinc CWE-89
critical
9.8
2022-06-29 CVE-2022-33057 SQL Injection vulnerability in Online Railway Reservation System Project Online Railway Reservation System 1.0
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_reservation.
7.2
2022-06-29 CVE-2022-33058 SQL Injection vulnerability in Online Railway Reservation System Project Online Railway Reservation System 1.0
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_message.
7.2
2022-06-29 CVE-2022-33059 SQL Injection vulnerability in Online Railway Reservation System Project Online Railway Reservation System 1.0
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_train.
7.2
2022-06-29 CVE-2022-33060 SQL Injection vulnerability in Online Railway Reservation System Project Online Railway Reservation System 1.0
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_schedule.
7.2
2022-06-29 CVE-2022-33061 SQL Injection vulnerability in Online Railway Reservation System Project Online Railway Reservation System 1.0
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_service.
7.2
2022-06-29 CVE-2022-33042 SQL Injection vulnerability in Online Railway Reservation System Project Online Railway Reservation System 1.0
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/view_details.php.
7.2
2022-06-28 CVE-2021-41460 SQL Injection vulnerability in Shopex Ecshop 4.1.0
ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information.
network
low complexity
shopex CWE-89
7.5