CWE-89

EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in t

SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute ar

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_order_i

A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in R-HUB TurboMeeting through 8.x all

The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowin

The query functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowin

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via

The WpStickyBar WordPress plugin through 2.1.0 does not properly sanitise and escape a parameter before using it in a S

SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mikafon Electronic

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows

SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbit

SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by s

SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by s

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could explo

SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection.

SourceCodester Computer Laboratory Management System 1.0 allows admin/category/view_category.php id SQL Injection.

A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows an

Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."

A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 al

A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execut

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder is affected by a time-based

Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated re

Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated re

Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.php.

The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it

Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type paramet

Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter

Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/co

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password paramete

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport paramet

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter