SQL Injection

Every one of the 104 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=system_info/contact_information.CVE-2023-33592Oretnom23 · 3.8% likely

   CWE-89

2. Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2CVE-2023-34581Oretnom23 · 3.3% likely

   CWE-89

3. SQL injection vulnerability in Packers and Movers Management System v.1.0 allows a remote attacker to execute arbitrary code via crafted payload to the /mpms/admin/?page=user/mana…CVE-2023-46956Oretnom23 · CVSS 7.2 · 1.2% likely

   CWE-89

4. Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customer_support/ajax.php?action=login.CVE-2023-49547Oretnom23 · CVSS 9.8 · 1.1% likely

   CWE-89

5. Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update function.CVE-2023-24730Oretnom23 · 1.0% likely

   CWE-89

6. Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update function.CVE-2023-24729Oretnom23 · 1.0% likely

   CWE-89

7. Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the subject parameter under the Create Ticket function.CVE-2023-24656Oretnom23 · CVSS 8.8 · 1.0% likely

   CWE-89

8. Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Request a Quote function.CVE-2023-24654Oretnom23 · CVSS 8.8 · 1.0% likely

   CWE-89

9. Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldpass parameter under the Change Password function.CVE-2023-24653Oretnom23 · CVSS 8.8 · 1.0% likely

   CWE-89

10. Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the Description parameter under the Create ticket function.CVE-2023-24652Oretnom23 · CVSS 8.8 · 1.0% likely

    CWE-89

11. Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter under the Admin Panel.CVE-2023-24364Oretnom23 · CVSS 8.8 · 1.0% likely

    CWE-89

12. SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via sub_event_id parame…CVE-2023-30016Oretnom23 · CVSS 9.8 · 1.0% likely

    CWE-89

13. SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via txtsearch parameter…CVE-2023-30015Oretnom23 · CVSS 9.8 · 1.0% likely

    CWE-89

14. SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via sub_event_id parame…CVE-2023-30014Oretnom23 · CVSS 9.8 · 1.0% likely

    CWE-89

15. Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function.CVE-2023-24655Oretnom23 · 1.0% likely

    CWE-89

16. Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function.CVE-2023-24732Oretnom23 · 1.0% likely

    CWE-89

17. Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update function.CVE-2023-24731Oretnom23 · 1.0% likely

    CWE-89

18. Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function.CVE-2023-24728Oretnom23 · 1.0% likely

    CWE-89

19. Sourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /inquiries/view_inquiry.php.CVE-2023-30415Oretnom23 · 1.0% likely

    CWE-89

20. A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter…CVE-2024-48427Oretnom23 · CVSS 8.1 · 0.9% likely

    CWE-89

21. Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php.CVE-2023-24200Oretnom23 · CVSS 9.8 · 0.9% likely

    CWE-89

22. Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete_ticket.php.CVE-2023-24199Oretnom23 · CVSS 9.8 · 0.9% likely

    CWE-89

23. Sourcecodester Student Study Center Desk Management System v1.0 admin\reports\index.php#date_from has a SQL Injection vulnerability.CVE-2023-29985Oretnom23 · CVSS 9.8 · 0.9% likely

    CWE-89

24. Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the ticket_id and draw parameters.CVE-2023-24198Oretnom23 · CVSS 9.8 · 0.9% likely

    CWE-89

25. Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.php?action=save_ticket.CVE-2023-49970Oretnom23 · CVSS 9.8 · 0.8% likely

    CWE-89

26. SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categories/view_category.ph…CVE-2024-37857Oretnom23 · CVSS 8.8 · 0.8% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.