Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

DATE CVE VULNERABILITY TITLE RISK
2024-11-05 CVE-2024-10809 SQL Injection vulnerability in Anisha E-Health Care System 1.0
A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical.
network
low complexity
anisha CWE-89
7.5
2024-11-05 CVE-2024-10810 SQL Injection vulnerability in Anisha E-Health Care System 1.0
A vulnerability was found in code-projects E-Health Care System 1.0.
network
low complexity
anisha CWE-89
7.5
2024-11-04 CVE-2024-10805 SQL Injection vulnerability in Anisha University Event Management System 1.0
A vulnerability was found in code-projects University Event Management System 1.0.
network
low complexity
anisha CWE-89
8.8
2024-11-04 CVE-2024-10791 SQL Injection vulnerability in Codezips Hospital Appointment System 1.0
A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0.
network
low complexity
codezips CWE-89
critical
9.8
2024-11-04 CVE-2024-51326 SQL Injection vulnerability in Projectworlds Travel Management System 1.0
SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in deletesubcategory.php.
network
low complexity
projectworlds CWE-89
7.5
2024-11-04 CVE-2024-51327 SQL Injection vulnerability in Projectworlds Travel Management System 1.0
SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields.
network
low complexity
projectworlds CWE-89
critical
9.8
2024-11-04 CVE-2024-51626 SQL Injection vulnerability in Mansurahamed Woocommerce Quote Calculator
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mansur Ahamed Woocommerce Quote Calculator allows Blind SQL Injection.This issue affects Woocommerce Quote Calculator: from n/a through 1.1.
network
low complexity
mansurahamed CWE-89
8.8
2024-11-04 CVE-2024-51672 SQL Injection vulnerability in Wpdeveloper Betterlinks
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPDeveloper BetterLinks allows SQL Injection.This issue affects BetterLinks: from n/a through 2.1.7.
network
low complexity
wpdeveloper CWE-89
7.2
2024-11-04 CVE-2024-36485 SQL Injection vulnerability in Zohocorp Manageengine Adaudit Plus
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option.
network
low complexity
zohocorp CWE-89
8.8
2024-11-04 CVE-2024-48878 SQL Injection vulnerability in Zohocorp Manageengine Admanager Plus
Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report.
network
low complexity
zohocorp CWE-89
8.8