Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)) — Vulnerability Class 8861

8861 vulnerabilities classified as CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2023-0283 SourceCodester Online Flight Booking Management System POST Parameter review_search.php sql injection — Online Flight Booking Management System 6.3 Medium2023-01-13
CVE-2023-0281 SourceCodester Online Flight Booking Management System judge_panel.php sql injection — Online Flight Booking Management System 6.3 Medium2023-01-13
CVE-2023-0256 SourceCodester Online Food Ordering System Login Page sql injection — Online Food Ordering System 6.3 Medium2023-01-12
CVE-2023-0254 Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injection — Simple Membership WP user Import 7.2 High2023-01-12
CVE-2013-10011 aeharding classroom-engagement-system sql injection — classroom-engagement-system 6.3 Medium2023-01-12
CVE-2023-0245 SourceCodester Online Flight Booking Management System add_contestant.php sql injection — Online Flight Booking Management System 6.3 Medium2023-01-12
CVE-2023-0244 TuziCMS KefuController.class.php delall sql injection — TuziCMS 6.3 Medium2023-01-12
CVE-2023-0243 TuziCMS Article Module ArticleController.class.php index sql injection — TuziCMS 6.3 Medium2023-01-12
CVE-2015-10039 dobos domino EntityFactory.cs sql injection — domino 5.5 Medium2023-01-11
CVE-2015-10038 nym3r0s pplv2 sql injection — pplv2 5.5 Medium2023-01-11
CVE-2014-125076 NoxxieNl Criminals roulette.php sql injection — Criminals 5.5 Medium2023-01-11
CVE-2014-125075 gmail-servlet Model.java search sql injection — gmail-servlet 5.5 Medium2023-01-11
CVE-2022-40615 IBM Sterling Partner Engagement Manager SQL injection — Sterling Partner Engagement Manager 6.3 Medium2023-01-11
CVE-2017-20168 jfm-so piWallet api.php sql injection — piWallet 5.5 Medium2023-01-11
CVE-2014-125074 Nayshlok Voyager DatabaseAccess.java sql injection — Voyager 5.5 Medium2023-01-11
CVE-2015-10037 ACI_Escola sql injection — ACI_Escola 5.5 Medium2023-01-11
CVE-2015-10036 kylebebak dronfelipe sql injection — dronfelipe 5.5 Medium2023-01-11
CVE-2014-125073 mapoor voteapp app.py show_refresh sql injection — voteapp 5.5 Medium2023-01-10
CVE-2023-0016 SQL Injection vulnerability in SAP Business Planning and Consolidation MS — SAP BPC MS 10.0 9.9 Critical2023-01-10
CVE-2022-3792 SQL Injection in GullsEye Terminal Operating System — GullsEye terminal operating system 9.8 Critical2023-01-10
CVE-2022-4422 SQLi in Bulutdesk Callcenter — Bulutdesk Callcenter 9.8 Critical2023-01-10
CVE-2014-125072 CherishSin klattr sql injection — klattr 5.5 Medium2023-01-09
CVE-2015-10035 gperson angular-test-reporter data-server.js addTest sql injection — angular-test-reporter 5.5 Medium2023-01-09
CVE-2015-10034 j-nowak workout-organizer sql injection — workout-organizer 5.5 Medium2023-01-09
CVE-2016-15016 mrtnmtth joomla_mod_einsatz_stats helper.php getStatsByType sql injection — joomla_mod_einsatz_stats 5.5 Medium2023-01-08
CVE-2015-10031 purpleparrots 491-Project Highscore update.php sql injection — 491-Project 5.5 Medium2023-01-08
CVE-2018-25072 lojban jbovlaste listing.html sql injection — jbovlaste 6.3 Medium2023-01-08
CVE-2019-25100 happyman twmap pointdata2.php sql injection — twmap 5.5 Medium2023-01-08
CVE-2020-36648 pouetnet pouet sql injection — pouet 5.5 Medium2023-01-08
CVE-2007-10002 web-cyradm auth.inc.php sql injection — web-cyradm 7.3 High2023-01-08

Vulnerabilities classified as CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)) represent 8861 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.