Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21,745

Export CSV
CVE-2024-13147

SQLi in Merkur Software's B2B Login Panel

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Merkur Software B2B Login Panel allows SQL Injection. This issue affects B2B Login Panel: before 15.01.2025.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2024-13148

SQLi in Yukseloglu Filter's B2B Login Platform

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yukseloglu Filter B2B Login Platform allows SQL Injection. This issue affects B2B Login Platform: before 16.01.2025.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2024-13149

SQLi in Arma Store's Armalife

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arma Store Armalife allows SQL Injection. This issue affects Armalife: through 20250916.  NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Arma Store
Products
Armalife
CVE-2024-13150

SQLi in Fayton Software's fayton.pro ERP

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Fayton Software and Consulting Services fayton.Pro ERP allows SQL Injection. This issue affects fayton.Pro ERP: through 20250929.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Fayton
Products
Pro Erp
CVE-2024-13152

SQLi in BSS Software's Mobuy Online Machinery Monitoring Panel

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2024-13174

SQLi in E1 Informatics' Web Application

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E1 Informatics Web Application allows SQL Injection. This issue affects Web Application: through 20250916.  NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
E1 Informatics
Products
Web Application
CVE-2023-0939

Multiple SQL Injection on NTN Information Technologies' Online Services software

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NTN Information Technologies Online Services Software allows SQL Injection. This issue affects Online Services Software: before 1.17.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Online Services Project
Products
Online Services
CVE-2023-0979

SQLi in MedDataPACS

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MedData MedDataPACS allows SQL Injection. This issue affects MedDataPACS : before 2023-03-03.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Meddatapacs
Products
Meddatapacs
CVE-2023-1050

SQLi in As Koc Web Report System

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in As Koc Energy Web Report System allows SQL Injection. This issue affects Web Report System: before 23.03.10.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Askoc
Products
Web Report System
CVE-2023-1064

SQLi in Uzay Baskul's Weighbridge Automation Software

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection. This issue affects Weighbridge Automation Software: before 1.1.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Uzaybaskul
Products
Weighbridge Automation Software
CVE-2023-1091

SQL Injection found in ALPATA's Licensed Warehousing Automation System

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpata Licensed Warehousing Automation System allows Command Line Execution through SQL Injection. This issue affects Licensed Warehousing Automation System: through 2023.1.01.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Alpatateknoloji
Products
Licensed Warehousing Automation System
CVE-2023-1152

SQLi in Utarit Persolus

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies Persolus allows SQL Injection. This issue affects Persolus: before 2.03.93.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Utarit
Products
Persolus
CVE-2023-1153

SQLi in Pacsrapor

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pacsrapor allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Pacsrapor: before 1.22.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Pacsrapor
Products
Pacsrapor
CVE-2026-10225

raisulislamg4 student_management_system_by_php Login login_check.php sql injection

A vulnerability was detected in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1. This issue affects some unknown processing of the file login_check.php of the component Login. Performing a manipulation of the argument Username results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Raisulislamg4
Products
Student Management System By Php
CVE-2023-1198

SQLi in Saysis Starcities

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saysis Starcities allows SQL Injection. This issue affects Starcities: through 1.3.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Saysis
Products
Starcities
CVE-2023-1251

SQLi in Wolvox

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akinsoft Wolvox. This issue affects Wolvox: before 8.02.03.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Wolvox
CVE-2023-1267

SQLi in Ulkem Company's PtteM Kart

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ulkem Company PtteM Kart. This issue affects PtteM Kart: before 2.1.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Pttemkart
Products
Pttem Kart
CVE-2023-1508

SQLi in AdamPOS's Mobilmen Terminal Software

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adam Retail Automation Systems Mobilmen Terminal Software allows SQL Injection. This issue affects Mobilmen Terminal Software: before 3.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Adampos
Products
Mobilmen El Terminali Yazilimi
CVE-2026-10237

SourceCodester Water Billing Management System User Management manage_user sql injection

A vulnerability was found in SourceCodester Water Billing Management System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user of the component User Management Module. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Sourcecodester
Products
Water Billing Management System
CVE-2023-1547

SQLi in Elra Computers Parkmatik

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection. This issue affects Parkmatik: before 02.01-a51.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Elra
Products
Parkmatik