Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: sqli Clear

ID	Title	Severity	Tags	Detected
CVE-2017-17611	Doctor Search Script 1.0 has SQL Injection via the /list city parameter. Doctor Search Script 1.0 has SQL Injection via the /list city parameter.	Critical	SQL Injection Cwe 89 Doctor Search Script Project Doctor Search Script	8 years ago
CVE-2017-17567	SQL Injection in sqli (CVE-2017-17567) SQL injection in sqli (CVE-2017-17567). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89 Scubez +1	8 years ago
CVE-2017-17570	SQL Injection in sqli (CVE-2017-17570) SQL injection in sqli (CVE-2017-17570). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Expedia Clone Project +1	8 years ago
CVE-2017-17571	FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter. FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.	Critical	SQL Injection Cwe 89 Foodpanda Clone Project Foodpanda Clone	8 years ago
CVE-2017-17572	FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari. FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.	Critical	SQL Injection Cwe 89 Amazon Clone Project Amazon Clone	8 years ago
CVE-2017-17573	SQL Injection in sqli (CVE-2017-17573) SQL injection in sqli (CVE-2017-17573). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Fortunescripts +1	8 years ago
CVE-2017-17574	FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter. FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.	Critical	PHP SQL Injection Cwe 89 Care Clone Project +1	8 years ago
CVE-2017-17575	SQL Injection in sqli (CVE-2017-17575) SQL injection in sqli (CVE-2017-17575). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Groupon Clone Project +1	8 years ago
CVE-2017-17576	SQL Injection in sqli (CVE-2017-17576) SQL injection in sqli (CVE-2017-17576). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Gigs Script Project +1	8 years ago
CVE-2017-17577	SQL Injection in sqli (CVE-2017-17577) SQL injection in sqli (CVE-2017-17577). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Trademe Clone Project +1	8 years ago
CVE-2017-17578	FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter. FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.	Critical	PHP SQL Injection Cwe 89 Crowdfunding Script Project +1	8 years ago
CVE-2017-17579	FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter. FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.	Critical	PHP SQL Injection Cwe 89 Freelancer Clone Project +1	8 years ago
CVE-2017-17580	SQL Injection in sqli (CVE-2017-17580) SQL injection in sqli (CVE-2017-17580). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Linkedin Clone Project +1	8 years ago
CVE-2017-17581	FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter. FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.	Critical	PHP SQL Injection Cwe 89 Quibids Clone Project +1	8 years ago
CVE-2017-17582	FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter. FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.	Critical	SQL Injection Cwe 89 Grubhub Clone Project Grubhub Clone	8 years ago
CVE-2017-17583	FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter. FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.	Critical	SQL Injection Cwe 89 Shutterstock Clone Project Shutterstock Clone	8 years ago
CVE-2017-17584	SQL Injection in sqli (CVE-2017-17584) SQL injection in sqli (CVE-2017-17584). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Makemytrip Clone Project +1	8 years ago
CVE-2017-17585	FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter. FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.	Critical	PHP SQL Injection Cwe 89 Monster Clone Project +1	8 years ago
CVE-2017-1606	SQL Injection in sqli (CVE-2017-1606) SQL injection in sqli (CVE-2017-1606). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Ibm Financial Transaction Manager	8 years ago
CVE-2017-1356	SQL Injection in sqli (CVE-2017-1356) SQL injection in sqli (CVE-2017-1356). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Ibm Atlas Ediscovery Process Management	8 years ago
CVE-2017-17102	Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $_REQUEST['link']. Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $_REQUEST['link'].	High	PHP SQL Injection Cwe 89 Fiyo +1	8 years ago
CVE-2017-17103	SQL Injection in sqli (CVE-2017-17103) SQL injection in sqli (CVE-2017-17103). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Fiyo +1	8 years ago
CVE-2017-16893	SQL Injection in sqli (CVE-2017-16893) SQL injection in sqli (CVE-2017-16893). Confidential information can be exposed externally.	Medium	PHP SQL Injection Cwe 89 Piwigo	8 years ago
CVE-2017-10898	SQL Injection in sqli (CVE-2017-10898) SQL injection in sqli (CVE-2017-10898). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Ark Web A Member	8 years ago
CVE-2017-10899	SQL Injection in sqli (CVE-2017-10899) SQL injection in sqli (CVE-2017-10899). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Ark Web A Reserve	8 years ago
CVE-2017-12364	SQL Injection in sqli (CVE-2017-12364) SQL injection in sqli (CVE-2017-12364). Risk of unauthorized operations or information disclosure.	Medium	SQL Injection Cwe 89 Cisco Prime Service Catalog	8 years ago
CVE-2017-16955	SQL Injection in wordpress (CVE-2017-16955) SQL injection in wordpress (CVE-2017-16955). Successful exploitation can lead to full system takeover.	High	PHP WordPress SQL Injection Cwe 89 +2	8 years ago
CVE-2017-16961	SQL Injection in sqli (CVE-2017-16961) SQL injection in sqli (CVE-2017-16961). Confidential information can be exposed externally.	Medium	PHP SQL Injection Cwe 89 Bigtreecms +1	8 years ago
CVE-2017-8198	SQL Injection in sqli (CVE-2017-8198) SQL injection in sqli (CVE-2017-8198). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Huawei Fusionsphere	8 years ago
CVE-2015-3934	SQL Injection in sqli (CVE-2015-3934) SQL injection in sqli (CVE-2015-3934). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Fiyo +1	8 years ago
CVE-2017-16896	SQL Injection in sqli (CVE-2017-16896) SQL injection in sqli (CVE-2017-16896). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Tt Rss +1	8 years ago
CVE-2017-1000129	SQL Injection in sqli (CVE-2017-1000129) SQL injection in sqli (CVE-2017-1000129). Confidential information can be exposed externally.	High	SQL Injection Cwe 89 S9Y Serendipity	8 years ago
CVE-2017-16846	SQL Injection in sqli (CVE-2017-16846) SQL injection in sqli (CVE-2017-16846). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Zohocorp Manageengine Applications Manager	8 years ago
CVE-2017-16847	SQL Injection in sqli (CVE-2017-16847) SQL injection in sqli (CVE-2017-16847). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Zohocorp Manageengine Applications Manager	8 years ago
CVE-2017-16848	SQL Injection in sqli (CVE-2017-16848) SQL injection in sqli (CVE-2017-16848). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Zohocorp Manageengine Applications Manager	8 years ago
CVE-2017-16849	SQL Injection in sqli (CVE-2017-16849) SQL injection in sqli (CVE-2017-16849). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Zohocorp Manageengine Applications Manager	8 years ago
CVE-2017-16850	SQL Injection in sqli (CVE-2017-16850) SQL injection in sqli (CVE-2017-16850). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Zohocorp Manageengine Applications Manager	8 years ago
CVE-2017-16851	SQL Injection in sqli (CVE-2017-16851) SQL injection in sqli (CVE-2017-16851). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Zohocorp Manageengine Applications Manager	8 years ago
CVE-2017-12302	SQL Injection in sqli (CVE-2017-12302) SQL injection in sqli (CVE-2017-12302). Risk of unauthorized operations or information disclosure.	Medium	SQL Injection Cwe 89 Cisco Unified Communications Domain Manager	8 years ago
CVE-2015-3933	SQL Injection in sqli (CVE-2015-3933) SQL injection in sqli (CVE-2015-3933). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Metalgenix +1	8 years ago
CVE-2017-16561	SQL Injection in sqli (CVE-2017-16561) SQL injection in sqli (CVE-2017-16561). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Ingenious School Management System Project +1	8 years ago
CVE-2017-16542	SQL Injection in sqli (CVE-2017-16542) SQL injection in sqli (CVE-2017-16542). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Zohocorp Manageengine Applications Manager	8 years ago
CVE-2017-16543	SQL Injection in sqli (CVE-2017-16543) SQL injection in sqli (CVE-2017-16543). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Zohocorp Manageengine Applications Manager	8 years ago
CVE-2017-11508	SQL Injection in sqli (CVE-2017-11508) SQL injection in sqli (CVE-2017-11508). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Tenable Securitycenter +1	8 years ago
CVE-2017-12276	Vulnerability in sqli (CVE-2017-12276) vulnerability in sqli (CVE-2017-12276). Confidential information can be exposed externally.	High	SQL Injection Cwe 20 Cwe 89 Cisco +1	8 years ago
CVE-2017-16510	SQL Injection in wordpress (CVE-2017-16510) SQL injection in wordpress (CVE-2017-16510). Successful exploitation can lead to full system takeover.	Critical	WordPress SQL Injection Cwe 89	8 years ago
CVE-2017-14356	SQL Injection in express (CVE-2017-14356) SQL injection in express (CVE-2017-14356). Successful exploitation can lead to full system takeover.	Critical	Express SQL Injection Cwe 89 Hp +2	8 years ago
CVE-2017-15977	Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter. Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter.	Critical	SQL Injection Cwe 89 Protectedlinks Expiring Download Links	8 years ago
CVE-2017-15978	AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter. AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter.	Critical	PHP SQL Injection Cwe 89 Arox +1	8 years ago
CVE-2017-15979	Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter. Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter.	Critical	SQL Injection Cwe 89 Odallated Shareet	8 years ago

Vulnerabilities

🍪 About cookies