Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)) — Vulnerability Class 8832

8832 vulnerabilities classified as CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2019-25528 Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search — Inout EasyRooms Ultimate Edition 8.2 High2026-03-12
CVE-2019-25527 Inout EasyRooms Ultimate Edition v1.0 SQL Injection via searchdetailed — Inout EasyRooms Ultimate Edition 8.2 High2026-03-12
CVE-2019-25526 Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search — Inout EasyRooms Ultimate Edition 8.2 High2026-03-12
CVE-2019-25525 Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search — Inout EasyRooms Ultimate Edition 8.2 High2026-03-12
CVE-2019-25524 XooGallery Lastest Latest SQL Injection via results.php — XooGallery 8.2 High2026-03-12
CVE-2019-25523 XooGallery Lastest Latest SQL Injection via cat.php — XooGallery 8.2 High2026-03-12
CVE-2019-25522 XooGallery Lastest Latest Multiple SQL Injections via photo.php — XooGallery 8.2 High2026-03-12
CVE-2019-25521 XooGallery Lastest Latest SQL Injection via gal.php gal_id — XooGallery 8.2 High2026-03-12
CVE-2019-25520 Jettweb PHP Hazir Haber Sitesi Scripti V1 Authentication Bypass — Hazir Haber Sitesi Scripti 8.2 High2026-03-12
CVE-2019-25519 Jettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection — Hazir Haber Sitesi Scripti 8.2 High2026-03-12
CVE-2019-25518 Jettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection via arama.php — Hazir Haber Sitesi Scripti 8.2 High2026-03-12
CVE-2019-25517 Jettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection via haberarsiv.php — Hazir Haber Sitesi Scripti 8.2 High2026-03-12
CVE-2019-25516 Jettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection via gallery.php — Hazir Haber Sitesi Scripti 8.2 High2026-03-12
CVE-2019-25515 Jettweb PHP Hazir Haber Sitesi Scripti V3 Authentication Bypass — Hazir Haber Sitesi Scripti 7.5 High2026-03-12
CVE-2019-25513 Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection via datagetir.php — Hazir Haber Sitesi Scripti 8.2 High2026-03-12
CVE-2019-25514 Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection — Hazir Haber Sitesi Scripti 8.2 High2026-03-12
CVE-2019-25512 Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection — Hazir Haber Sitesi Scripti 8.2 High2026-03-12
CVE-2019-25511 Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection — Hazir Haber Sitesi Scripti 8.2 High2026-03-12
CVE-2019-25510 Jettweb PHP Hazir Haber Sitesi Scripti V2 Authentication Bypass — Hazir Haber Sitesi Scripti 8.2 High2026-03-12
CVE-2019-25509 XooDigital Lastest Latest SQL Injection via results.php — XooDigital 8.2 High2026-03-12
CVE-2019-25508 Jettweb Php Hazir Ilan Sitesi Scripti V2 SQL Injection via katgetir.php — Hazir Ilan Sitesi Scripti 8.2 High2026-03-12
CVE-2019-25488 Jettweb Hazir Rent A Car Scripti V4 SQL Injection via admin — Rent A Car Scripti 8.2 High2026-03-12
CVE-2019-25482 Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 SQL Injection — Hazir Rent A Car Sitesi Scripti 8.2 High2026-03-12
CVE-2019-25481 iScripts ReserveLogic Lastest SQL Injection via search endpoint — iScripts ReserveLogic 8.2 High2026-03-12
CVE-2019-25479 Inout RealEstate Lastest SQL Injection via agentlistdetails — Inout RealEstate 8.2 High2026-03-12
CVE-2019-25473 Clinic Pro SQL Injection via monthly_expense_overview month Parameter — Clinic Pro 7.1 High2026-03-12
CVE-2026-4014 itsourcecode Cafe Reservation System Registration signup.php sql injection — Cafe Reservation System 7.3 High2026-03-12
CVE-2026-3981 itsourcecode Online Doctor Appointment System doctor_action.php sql injection — Online Doctor Appointment System 7.3 High2026-03-12
CVE-2026-3980 itsourcecode Online Doctor Appointment System patient_action.php sql injection — Online Doctor Appointment System 7.3 High2026-03-12
CVE-2026-3657 My Sticky Bar <= 2.8.6 - Unauthenticated SQL Injection via 'stickymenu_contact_lead_form' Action — My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu) 7.5 High2026-03-12

Vulnerabilities classified as CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)) represent 8832 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.