Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)) — Vulnerability Class 8857

8857 vulnerabilities classified as CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2022-2677 SourceCodester Apartment Visitor Management System index.php sql injection — Apartment Visitor Management System 6.3 Medium2022-08-05
CVE-2022-2676 SourceCodester Electronic Medical Records System POST Request sql injection — Electronic Medical Records System 6.3 Medium2022-08-05
CVE-2022-36839 SAMSUNG Checkout SQL注入漏洞 — Samsung Checkout 5.9 Medium2022-08-05
CVE-2022-2674 SourceCodester Best Fee Management System admin_class.php login sql injection — Best Fee Management System 7.3 High2022-08-05
CVE-2022-2673 Rigatur Online Booking and Hotel Management System POST Request login.php sql injection — Online Booking and Hotel Management System 6.3 Medium2022-08-05
CVE-2022-2672 SourceCodester Garage Management System createUser.php sql injection — Garage Management System 6.3 Medium2022-08-05
CVE-2022-2671 SourceCodester Garage Management System removeUser.php sql injection — Garage Management System 6.3 Medium2022-08-05
CVE-2022-2667 SourceCodester Loan Management System delete_lplan.php sql injection — Loan Management System 6.3 Medium2022-08-05
CVE-2022-2665 SourceCodester Simple E-Learning System classroom.php sql injection — Simple E-Learning System 6.3 Medium2022-08-05
CVE-2022-2656 SourceCodester Multi Language Hotel Management Software sql injection — Multi Language Hotel Management Software 6.3 Medium2022-08-04
CVE-2022-32964 ITPison OMICARD EDM - SQL Injection — OMICARD EDM 9.8 Critical2022-08-04
CVE-2022-2648 SourceCodester Multi Language Hotel Management Software sql injection — Multi Language Hotel Management Software 6.3 Medium2022-08-04
CVE-2022-2644 SourceCodester Online Admission System GET Parameter sql injection — Online Admission System 5.5 Medium2022-08-04
CVE-2022-2643 SourceCodester Online Admission System POST Parameter sql injection — Online Admission System 6.3 Medium2022-08-04
CVE-2022-35864 BMC Community Track-It! SQL注入漏洞 — Track-It! 6.5 -2022-08-03
CVE-2022-34872 Centreon SQL注入漏洞 — Centreon 6.5 -2022-08-03
CVE-2022-34871 Centreon SQL注入漏洞 — Centreon 8.8 -2022-08-03
CVE-2022-2272 Santesoft Sante PACS Server SQL注入漏洞 — PACS Server 9.8 -2022-08-03
CVE-2022-31197 SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc — pgjdbc 7.1 High2022-08-03
CVE-2022-31181 Remote code execution in prestashop — PrestaShop 9.8 Critical2022-08-01
CVE-2022-1950 Youzify < 1.2.0 - Unauthenticated SQLi — Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress 9.8 -2022-08-01
CVE-2022-22280 SonicWALL Analytics On-Prem SQL注入漏洞 — SonicWall GMS 9.8 -2022-07-29
CVE-2022-2577 SourceCodester Garage Management System edituser.php sql injection — Garage Management System 6.3 Medium2022-07-29
CVE-2022-1277 SQL Injection in Inavitas Solar Log — Inavitas Solar Log 9.4 Critical2022-07-29
CVE-2022-27613 Synology CardDAV Server SQL注入漏洞 — CardDAV Server 8.3 High2022-07-28
CVE-2022-33965 WordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities — WP Visitor Statistics (WordPress plugin) 9.3 Critical2022-07-25
CVE-2017-20143 Itech Movie Portal Script film-rating.php Error sql injection — Movie Portal Script 6.3 Medium2022-07-22
CVE-2017-20142 Itech Movie Portal Script artist-display.php Union sql injection — Movie Portal Script 6.3 Medium2022-07-22
CVE-2017-20141 Itech Movie Portal Script movie.php Union sql injection — Movie Portal Script 6.3 Medium2022-07-22
CVE-2022-30998 WordPress Homepage Product Organizer for WooCommerce plugin <= 1.1 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities — Homepage Product Organizer for WooCommerce (WordPress plugin) 9.1 Critical2022-07-22

Vulnerabilities classified as CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)) represent 8857 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.