Skip to content

Inoutscripts · weakness class

SQL Injection

10 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

  1. Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chart_content/master.php symbol SQL injection.CVE-2022-31487Inoutscripts · 1.2% likely

    CWE-89

  2. Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutio_language cookie SQL injection.CVE-2022-31489Inoutscripts · 1.1% likely

    CWE-89

  3. Inout Blockchain AltExchanger 1.2.1 allows index.php/coins/update_marketboxslider marketcurrency SQL injection.CVE-2022-31488Inoutscripts · 1.1% likely

    CWE-89

  4. SQL injection vulnerability in ppc-add-keywords.php in Inout Adserver allows remote authenticated users to execute arbitrary SQL commands via the id parameter.CVE-2009-3223Inoutscripts · 0.9% likely

    CWE-89

  5. Inout EasyRooms Ultimate Edition v1.0 SQL Injection via searchdetailedCVE-2019-25527Inoutscripts · CVSS 8.2 · 0.5% likely

    CWE-89

  6. Inout EasyRooms Ultimate Edition v1.0 SQL Injection via searchCVE-2019-25525Inoutscripts · CVSS 8.2 · 0.5% likely

    CWE-89

  7. Inout EasyRooms Ultimate Edition v1.0 SQL Injection via searchCVE-2019-25528Inoutscripts · CVSS 8.2 · 0.5% likely

    CWE-89

  8. Inout RealEstate Lastest SQL Injection via agentlistdetailsCVE-2019-25479Inoutscripts · CVSS 8.2 · 0.4% likely

    CWE-89

  9. Inout EasyRooms Ultimate Edition v1.0 SQL Injection via searchCVE-2019-25526Inoutscripts · CVSS 8.2 · 0.4% likely

    CWE-89

  10. Inout Article Base CMS Lastest SQL Injection via portalLogin.phpCVE-2019-25640Inoutscripts · CVSS 8.2 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.