Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

DATE CVE VULNERABILITY TITLE RISK
2024-12-05 CVE-2024-12188 SQL Injection vulnerability in 1000Projects Library Management System 1.0
A vulnerability was found in 1000 Projects Library Management System 1.0.
network
low complexity
1000projects CWE-89
critical
9.8
2024-12-03 CVE-2024-11732 The BP Profile Shortcodes Extra plugin for WordPress is vulnerable to time-based SQL Injection via the ‘tab’ parameter in all versions up to, and including, 2.6.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
CWE-89
6.5
2024-12-01 CVE-2024-12007 SQL Injection vulnerability in Code-Projects Farmacia 1.0
A vulnerability, which was classified as critical, was found in code-projects Farmacia 1.0.
network
low complexity
code-projects CWE-89
critical
9.8
2024-11-30 CVE-2024-11998 SQL Injection vulnerability in Farmacia Project Farmacia 1.0
A vulnerability was found in code-projects Farmacia 1.0.
network
low complexity
farmacia-project CWE-89
7.5
2024-11-28 CVE-2024-11970 SQL Injection vulnerability in Anisha Concert Ticket Ordering System 1.0
A vulnerability classified as critical has been found in code-projects Concert Ticket Ordering System 1.0.
network
low complexity
anisha CWE-89
critical
9.8
2024-11-28 CVE-2024-11966 SQL Injection vulnerability in PHPgurukul Complaint Management System 1.0
A vulnerability was found in PHPGurukul Complaint Management system 1.0 and classified as critical.
network
low complexity
phpgurukul CWE-89
critical
9.8
2024-11-28 CVE-2024-11967 SQL Injection vulnerability in PHPgurukul Complaint Management System 1.0
A vulnerability was found in PHPGurukul Complaint Management system 1.0.
network
low complexity
phpgurukul CWE-89
critical
9.8
2024-11-28 CVE-2024-11968 SQL Injection vulnerability in Anisha Farmacia 1.0
A vulnerability was found in code-projects Farmacia up to 1.0.
network
low complexity
anisha CWE-89
7.5
2024-11-28 CVE-2024-11964 SQL Injection vulnerability in PHPgurukul Complaint Management System 1.0
A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management system 1.0.
network
low complexity
phpgurukul CWE-89
critical
9.8
2024-11-28 CVE-2024-11965 SQL Injection vulnerability in PHPgurukul Complaint Management System 1.0
A vulnerability has been found in PHPGurukul Complaint Management system 1.0 and classified as critical.
network
low complexity
phpgurukul CWE-89
critical
9.8