Skip to content

Softbizscripts · weakness class

SQL Injection

16 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 16 is a mark on the map. Named now: 1 to 16, most at risk first.

  1. Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter in s…CVE-2005-3817Softbizscripts · 4.1% likely

    CWE-89

  2. SQL injection vulnerability in search_form.php in Softbiz Freelancers Script 1 allows remote attackers to execute arbitrary SQL commands via the sb_protype parameter.CVE-2007-6125Softbizscripts · 1.5% likely

    CWE-89

  3. SQL injection vulnerability in searchresult.php in Softbiz Recipes Portal Script allows remote attackers to execute arbitrary SQL commands via the sbcat_id parameter.CVE-2007-5449Softbizscripts · 1.4% likely

    CWE-89

  4. SQL injection vulnerability in browsecats.php in Softbiz Jobs and Recruitment Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.CVE-2007-5316Softbizscripts · 1.4% likely

    CWE-89

  5. SQL injection vulnerability in search_result.php in Softbiz Web Host Directory Script, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands…CVE-2008-2087Softbizscripts · 1.4% likely

    CWE-89

  6. SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote attackers to execute arbitrary SQL commands via the size_id parameter. NOTE: the prov…CVE-2009-2232Softbizscripts · 1.1% likely

    CWE-89

  7. SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbjoke_id parameter, a different ve…CVE-2008-2874Softbizscripts · 1.0% likely

    CWE-89

  8. SQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbiz_id parameter.CVE-2010-4905Softbizscripts · 1.0% likely

    CWE-89

  9. SQL injection vulnerability in product_desc.php in Softbiz Auctions Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2007-5999Softbizscripts · 1.0% likely

    CWE-89

  10. SQL injection vulnerability in store_info.php in SoftBiz Classifieds PLUS allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2007-5122Softbizscripts · 1.0% likely

    CWE-89

  11. SQL injection vulnerability in searchresult.php in Softbiz Link Directory Script allows remote attackers to execute arbitrary SQL commands via the sbcat_id parameter, a related is…CVE-2007-5996Softbizscripts · 1.0% likely

    CWE-89

  12. SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap…CVE-2009-2790Softbizscripts · 1.0% likely

    CWE-89

  13. SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2010-0758Softbizscripts · 1.0% likely

    CWE-89

  14. SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbcat_id parameter.CVE-2008-1050Softbizscripts · 1.0% likely

    CWE-89

  15. SQL injection vulnerability in ads.php in Softbiz Ad Management plus Script 1 allows remote authenticated users to execute arbitrary SQL commands via the package parameter.CVE-2007-5998Softbizscripts · 0.9% likely

    CWE-89

  16. SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id para…CVE-2007-5997Softbizscripts · 0.9% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.