SQL Injection

Every one of the 24 is a mark on the map. Named now: 1 to 24, most at risk first.

1. Drupal Core - Anonymous SQL Injection via PostgreSQL Entity QueryCVE-2026-9082Drupal · CVSS 9.8 · 89% likelycovered by CyberSIXT

   CWE-891 article

2. Drupal SQL InjectionCVE-2014-3704Drupal · 100% likely

   CWE-89

3. SQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to execute arbitrary SQL commands via vectors related to "an inappropriate placehold…CVE-2008-3223Drupal · 3.2% likely

   CWE-89

4. SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x before 7.39 allows remote attackers to execute arbitrary SQL commands via an SQL…CVE-2015-6659Drupal · 3.0% likely

   CWE-89

5. SQL injection vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1, a module for Drupal, allows remote attackers to execute arbitrary SQL…CVE-2009-1034Drupal · 1.8% likely

   CWE-89

6. Multiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x before 4.7.9 and 5.x before 5.4 allow remote attackers to execute arbitrary SQL commands via modules that pass…CVE-2007-6299Drupal · 1.7% likely

   CWE-89

7. SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an expo…CVE-2008-6020Drupal · 1.4% likely

   CWE-89

8. SQL injection vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2012-2306Drupal · 1.2% likely

   CWE-89

9. SQL injection vulnerability in the Mailhandler module 5.x before 5.x-1.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via…CVE-2008-4148Drupal · 1.1% likely

   CWE-89

10. SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute ar…CVE-2009-1505Drupal · 1.1% likely

    CWE-89

11. An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names.CVE-2011-2715Drupal · 1.1% likely

    CWE-89

12. SQL injection vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2008-6134Drupal · 1.1% likely

    CWE-89

13. SQL injection vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, relate…CVE-2008-4531Drupal · 1.1% likely

    CWE-89

14. Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2008-2999Drupal · 1.1% likely

    CWE-89

15. SQL injection vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified cookies, related to im…CVE-2008-2850Drupal · 1.1% likely

    CWE-89

16. Multiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allow remote authenticated users, with "updat…CVE-2008-5998Drupal · 1.0% likely

    CWE-89

17. Multiple SQL injection vulnerabilities in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allow remote authenticated administrators to…CVE-2008-6276Drupal · 0.9% likely

    CWE-89

18. SQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to execute arb…CVE-2008-3092Drupal · 0.9% likely

    CWE-89

19. SQL injection vulnerability in SpeedTech Organization and Resource Manager (Storm) 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module for Drupal, allows remote authenticated us…CVE-2008-6383Drupal · 0.8% likely

    CWE-89

20. SQL injection vulnerability in Node Vote 5.x before 5.x-1.1 and 6.x before 6.x-1.0, a module for Drupal, when "Allow user to vote again" is enabled, allows remote authenticated us…CVE-2008-4633Drupal · 0.8% likely

    CWE-89

21. CSP log - Critical - SQL Injection - SA-CONTRIB-2026-136CVE-2026-87938Drupal · CVSS 6.5 · 0.4% likely

    CWE-89

22. Location Selector - Critical - SQL Injection - SA-CONTRIB-2026-072CVE-2026-15081Drupal · CVSS 7.4 · 0.3% likely

    CWE-89

23. Geolocation Field - Critical - SQL Injection - SA-CONTRIB-2026-062CVE-2026-13242Drupal · CVSS 6.5 · 0.3% likely

    CWE-89

24. amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134CVE-2026-87936Drupal · CVSS 6.5 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.