Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)) — Vulnerability Class 8873

8873 vulnerabilities classified as CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2024-0478 code-projects Fighting Cock Information System edit_chicken.php sql injection — Fighting Cock Information System 6.3 Medium2024-01-13
CVE-2024-0477 code-projects Fighting Cock Information System update-deworm.php sql injection — Fighting Cock Information System 6.3 Medium2024-01-13
CVE-2024-0475 code-projects Dormitory Management System modifyuser.php sql injection — Dormitory Management System 6.3 Medium2024-01-13
CVE-2024-0474 code-projects Dormitory Management System login.php sql injection — Dormitory Management System 7.3 High2024-01-12
CVE-2024-0473 code-projects Dormitory Management System comment.php sql injection — Dormitory Management System 6.3 Medium2024-01-12
CVE-2024-0471 code-projects Human Resource Integrated System dec_service_credits.php sql injection — Human Resource Integrated System 6.3 Medium2024-01-12
CVE-2024-0470 code-projects Human Resource Integrated System inc_service_credits.php sql injection — Human Resource Integrated System 6.3 Medium2024-01-12
CVE-2024-0469 code-projects Human Resource Integrated System update_personal_info.php sql injection — Human Resource Integrated System 6.3 Medium2024-01-12
CVE-2024-0466 code-projects Employee Profile Management System file_table.php sql injection — Employee Profile Management System 5.5 Medium2024-01-12
CVE-2024-0464 code-projects Online Faculty Clearance HTTP GET Request delete_faculty.php sql injection — Online Faculty Clearance 6.3 Medium2024-01-12
CVE-2024-0463 code-projects Online Faculty Clearance HTTP POST Request admin_view_info.php sql injection — Online Faculty Clearance 6.3 Medium2024-01-12
CVE-2024-0462 code-projects Online Faculty Clearance HTTP POST Request designee_view_status.php sql injection — Online Faculty Clearance 6.3 Medium2024-01-12
CVE-2024-0461 code-projects Online Faculty Clearance HTTP POST Request deactivate.php sql injection — Online Faculty Clearance 6.3 Medium2024-01-12
CVE-2024-0460 code-projects Faculty Management System student-print.php sql injection — Faculty Management System 6.3 Medium2024-01-12
CVE-2024-0459 Blood Bank & Donor Management request-received-bydonar.php sql injection — Blood Bank & Donor Management 4.7 Medium2024-01-12
CVE-2022-4961 Weitong Mall OrderDao.xml sql injection — Mall 5.5 Medium2024-01-12
CVE-2024-0426 ForU CMS cms_template.php sql injection — CMS 6.3 Medium2024-01-11
CVE-2024-22196 Authenticated (user role) SQL injection in `OrderAndPaginate` (GHSL-2023-270) — nginx-ui 7.0 High2024-01-11
CVE-2023-6567 LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses 9.8 Critical2024-01-11
CVE-2024-0389 SourceCodester Student Attendance System attendance_report.php sql injection — Student Attendance System 6.3 Medium2024-01-10
CVE-2023-48261 Bosch Nexo cordless nutrunner 安全漏洞 — Nexo cordless nutrunner NXA015S-36V (0608842001) 5.3 Medium2024-01-10
CVE-2023-48260 Bosch Nexo cordless nutrunner 安全漏洞 — Nexo cordless nutrunner NXA015S-36V (0608842001) 5.3 Medium2024-01-10
CVE-2023-48259 Bosch Nexo cordless nutrunner 安全漏洞 — Nexo cordless nutrunner NXA015S-36V (0608842001) 5.3 Medium2024-01-10
CVE-2023-48253 Bosch Nexo cordless nutrunner 安全漏洞 — Nexo cordless nutrunner NXA015S-36V (0608842001) 8.8 High2024-01-10
CVE-2024-0364 PHPGurukul Hospital Management System query-details.php sql injection — Hospital Management System 5.5 Medium2024-01-10
CVE-2024-0363 PHPGurukul Hospital Management System patient-search.php sql injection — Hospital Management System 5.5 Medium2024-01-10
CVE-2024-0362 PHPGurukul Hospital Management System change-password.php sql injection — Hospital Management System 5.5 Medium2024-01-10
CVE-2024-0361 PHPGurukul Hospital Management System contact.php sql injection — Hospital Management System 5.5 Medium2024-01-10
CVE-2024-0360 PHPGurukul Hospital Management System edit-doctor-specialization.php sql injection — Hospital Management System 5.5 Medium2024-01-10
CVE-2024-0359 code-projects Simple Online Hotel Reservation System login.php sql injection — Simple Online Hotel Reservation System 7.3 High2024-01-10

Vulnerabilities classified as CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)) represent 8873 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.