CWE-89
High likelihoodImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
19,910 vulnerabilities with CWE-89
CVE-2017-17631
CRITICAL
Multireligion Responsive Matrimonial 4.7.2 - SQL Injection via success-story.php succid Parameter
CVSS 9.8
CVE-2017-17630
CRITICAL
Yoga Class Script 1.0 - SQL Injection via City Parameter
CVSS 9.8
CVE-2017-17629
CRITICAL
Secure E-commerce Script 2.0.1 - SQL Injection via Category Search or Product Detail Parameters
CVSS 9.8
CVE-2017-17628
CRITICAL
Responsive Realestate Script 3.2 - SQL Injection via Property-List tbud Parameter
CVSS 9.8
CVE-2017-17627
CRITICAL
Readymade Video Sharing Script 3.2 - SQL Injection via Report Videos Array Parameter
CVSS 9.8
CVE-2017-17626
CRITICAL
Readymade PHP Classified Script 3.3 - SQL Injection via Categories Subctid or Mctid Parameter
CVSS 9.8
CVE-2017-17625
CRITICAL
Professional Service Script 1.0 - SQL Injection via City Parameter
CVSS 9.8
CVE-2017-17624
CRITICAL
PHP Multivendor Ecommerce 1.0 - SQL Injection via single_detail.php or category.php
CVSS 9.8
CVE-2017-17623
CRITICAL
Opensource Classified Ads Script 3.2 - SQL Injection via Advance Result Keyword Parameter
CVSS 9.8
CVE-2017-17622
CRITICAL
Online Exam Test Application Script 1.6 - SQL Injection via exams.php sort parameter
CVSS 9.8
CVE-2017-17621
CRITICAL
Multivendor Penny Auction Clone Script 1.0 - SQL Injection via PATH_INFO to Detail URI
CVSS 9.8
CVE-2017-17620
CRITICAL
Lawyer Search Script 1.1 - SQL Injection via City Parameter
CVSS 9.8
CVE-2017-17619
CRITICAL
Laundry Booking Script 1.0 - SQL Injection via City Parameter
CVSS 9.8
CVE-2017-17618
CRITICAL
Kickstarter Clone Script 2.0 - SQL Injection via investcalc.php projid Parameter
CVSS 9.8
CVE-2017-17617
CRITICAL
Foodspotting Clone Script 1.0 - SQL Injection via Quicksearch q Parameter
CVSS 9.8
CVE-2017-17616
CRITICAL
Event Search Script 1.0 - SQL Injection via City Parameter
CVSS 9.8
CVE-2017-17615
HIGH
Facebook Clone Script 1.0 - SQL Injection via Friend-Profile ID Parameter
CVSS 8.8
CVE-2017-17614
CRITICAL
Food Order Script 1.0 - SQL Injection via City Parameter
CVSS 9.8
CVE-2017-17613
CRITICAL
Freelance Website Script 2.0.6 - SQL Injection via jobdetails.php pr_id or searchbycat_list.php catid Parameter
CVSS 9.8
CVE-2017-17612
CRITICAL
Hot Scripts Clone 3.1 - SQL Injection via Categories Subctid or Mctid Parameter
CVSS 9.8
CVE-2017-17611
CRITICAL
Doctor Search Script 1.0 - SQL Injection via City Parameter
CVSS 9.8
CVE-2017-17610
CRITICAL
E-commerce MLM Software 1.0 - SQL Injection via Service Detail PID Parameter
CVSS 9.8
CVE-2017-17609
CRITICAL
Chartered Accountant Booking Script 1.0 - SQL Injection via Service-List City Parameter
CVSS 9.8
CVE-2017-17608
CRITICAL
Child Care Script 1.0 - SQL Injection via City Parameter
CVSS 9.8
CVE-2017-17607
CRITICAL
CMS Auditor Website 1.0 - SQL Injection via PATH_INFO to /news-detail
CVSS 9.8
Details
Vulnerabilities
19,910
Exploit Likelihood
High