CWE-89
High likelihoodImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
19,910 vulnerabilities with CWE-89
CVE-2017-17606
CRITICAL
Co-work Space Search Script 1.0 - SQL Injection via City Parameter
CVSS 9.8
CVE-2017-17605
CRITICAL
Consumer Complaints Clone Script 1.0 - SQL Injection via other-user-profile.php id Parameter
CVSS 9.8
CVE-2017-17604
CRITICAL
Entrepreneur Bus Booking Script 3.0.4 - SQL Injection via Booker Details Sourcebus Parameter
CVSS 9.8
CVE-2017-17603
CRITICAL
Advanced Real Estate Script 4.0.7 - SQL Injection via Search Parameters
CVSS 9.8
CVE-2017-17602
CRITICAL
Advance B2B Script 2.1.3 - SQL Injection via tradeshow-list-detail.php show_id or view-product.php pid Parameter
CVSS 9.8
CVE-2017-17601
CRITICAL
Cab Booking Script 1.0 - SQL Injection via Service-List City Parameter
CVSS 9.8
CVE-2017-17600
CRITICAL
Basic B2B Script 2.0.8 - SQL Injection via product_details.php id Parameter
CVSS 9.8
CVE-2017-17599
CRITICAL
Advance Online Learning Management Script 3.1 - SQL Injection via courselist.php subcatid or popcourseid Parameter
CVSS 9.8
CVE-2017-17598
CRITICAL
Affiliate MLM Script 1.0 - SQL Injection via product-category.php key Parameter
CVSS 9.8
CVE-2017-17597
CRITICAL
Nearbuy Clone Script 3.2 - SQL Injection via Category List Search Parameter
CVSS 9.8
CVE-2017-17596
CRITICAL
Entrepreneur Job Portal Script 2.0.6 - SQL Injection via jobsearch_all.php rid1 Parameter
CVSS 9.8
CVE-2017-17595
CRITICAL
Beauty Parlour Booking Script 1.0 - SQL Injection via Gender or City Parameter
CVSS 9.8
CVE-2017-17594
CRITICAL
DomainSale PHP Script 1.0 - SQL Injection via domain.php id Parameter
CVSS 9.8
CVE-2017-17592
CRITICAL
Website Auction Marketplace 2.0.5 - SQL Injection via search.php cat_id Parameter
CVSS 9.8
CVE-2017-17591
CRITICAL
Realestate Crowdfunding Script 2.7.2 - SQL Injection via single-cause.php pid Parameter
CVSS 9.8
CVE-2017-17590
CRITICAL
FS Stackoverflow Clone 1.0 - SQL Injection via Question Keywords Parameter
CVSS 9.8
CVE-2017-17589
CRITICAL
FS Thumbtack Clone 1.0 - SQL Injection via Category Parameter
CVSS 9.8
CVE-2017-17588
CRITICAL
FS IMDB Clone 1.0 - SQL Injection via movie.php f Parameter
CVSS 9.8
CVE-2017-17587
CRITICAL
FS Indiamart Clone 1.0 - SQL Injection via catcompany.php token Parameter
CVSS 9.8
CVE-2017-17586
CRITICAL
FS Olx Clone 1.0 - SQL Injection via subpage.php scat or message.php pid Parameter
CVSS 9.8
CVE-2017-17585
CRITICAL
FS Monster Clone 1.0 - SQL Injection via Employer_Details.php id Parameter
CVSS 9.8
CVE-2017-17584
CRITICAL
FS Makemytrip Clone 1.0 - SQL Injection via fl_orig or fl_dest Parameter
CVSS 9.8
CVE-2017-17583
CRITICAL
FS Shutterstock Clone 1.0 - SQL Injection via Category Keywords Parameter
CVSS 9.8
CVE-2017-17582
CRITICAL
FS Grubhub Clone 1.0 - SQL Injection via Keywords Parameter
CVSS 9.8
CVE-2017-17581
CRITICAL
FS Quibids Clone 1.0 - SQL Injection via itechd.php productid Parameter
CVSS 9.8
Details
Vulnerabilities
19,910
Exploit Likelihood
High