weakness in SQL Injection
SQL Injection
21 disclosed reports · $2,755 paid · 21 valid
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. A report opens its page here: our analysis where there is one, and the link to HackerOne. The status is HackerOne's own outcome; "access needed" is only what a title states.
- reports
- 21
- valid
- 21
- paid a bounty
- 4
Every one of the 21 is a mark on the map. Named now: 1 to 21, most upvoted first.
- [intensedebate.com] SQL Injection Time Based On /js/commentAction/
- SQL injection in URL path leads to Database Access
- SQL Injection when using FilteredRelation
- Woocommerce SQL Injection in WC_Report_Coupon_Usage
- Error-Based & Time-Based SQL Injection in 'keyword' Parameter of admin-search.php Allowing Full Database Access in Revive Adserver v6.0.0
- SQL Injection in CVE Discovery Search
- SQL Injection in Django ORM via Unvalidated `_connector` in Q Objects
- SQL injection in JSONField KeyTransform
- Multiple vulnerabilities in a WordPress plugin at drive.uber.com
- Potential SQL Injection when annotating FilteredRelation on PostgreSQL
- Blind SQL injection via clientid parameter in zone‑include.php
- SQL Injection in ████
- SQL injection in MilestoneFinder order method
- SQL Injection found in NextCloud Android App Content Provider
- Apache Airflow Sql injection by authenticated user
- SQL Injection at https://████████.asp (█████████) [selMajcom] [HtUS]
- SQLi allow query restriction bypass on exposed FileContentProvider
- [typeorm] SQL Injection
- SQL injection when configuring a database
- [untitled-model] sql injection
- [query-mysql] SQL Injection due to lack of user input sanitization allows to run arbitrary SQL queries when fetching data from database
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.