SQL Injection

Every one of the 27 is a mark on the map. Named now: 1 to 26, most at risk first.

1. SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /common/log/list.CVE-2023-46981Xxyopen · 1.3% likely

   CWE-89

2. SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /sys/menu/list.CVE-2023-41443Xxyopen · 1.3% likely

   CWE-89

3. novel-plus list MenuService sql injectionCVE-2023-1594Xxyopen · CVSS 7.3 · 1.0% likely

   CWE-89

4. novel-plus 3.6.2 is vulnerable to SQL Injection.CVE-2023-30058Xxyopen · 1.0% likely

   CWE-89

5. Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java.CVE-2022-35121Xxyopen · 0.9% likely

   CWE-89

6. novel-plus DictController.java sql injectionCVE-2023-1606Xxyopen · CVSS 6.3 · 0.9% likely

   CWE-89

7. novel-plus list sql injectionCVE-2023-1595Xxyopen · CVSS 4.7 · 0.9% likely

   CWE-89

8. novel-plus sql injectionCVE-2023-2041Xxyopen · CVSS 6.3 · 0.8% likely

   CWE-89

9. novel-plus sql injectionCVE-2023-2039Xxyopen · CVSS 6.3 · 0.8% likely

   CWE-89

10. novel-plus sql injectionCVE-2023-2040Xxyopen · CVSS 6.3 · 0.7% likely

    CWE-89

11. novel-plus list sql injectionCVE-2023-1607Xxyopen · CVSS 4.7 · 0.7% likely

    CWE-89

12. novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.CVE-2023-37847Xxyopen · 0.7% likely

    CWE-89

13. Novel-Plus list sql injectionCVE-2024-0655Xxyopen · CVSS 5.5 · 0.7% likely

    CWE-89

14. Novel-Plus list sql injectionCVE-2024-0941Xxyopen · CVSS 5.5 · 0.7% likely

    CWE-89

15. A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to perform SQL injection via /com…CVE-2024-24017Xxyopen · CVSS 7.5 · 0.6% likely

    CWE-89

16. A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass specially crafted offset, limit, and sort parameters to perform SQL injection via /no…CVE-2024-24023Xxyopen · CVSS 9.8 · 0.6% likely

    CWE-89

17. A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass specially crafted offset, limit, and sort parameters to perform SQL injection via /no…CVE-2024-24021Xxyopen · CVSS 9.8 · 0.6% likely

    CWE-89

18. A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to perform SQL injection via /nov…CVE-2024-24014Xxyopen · CVSS 9.8 · 0.6% likely

    CWE-89

19. A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL injection via /…CVE-2024-24018Xxyopen · CVSS 9.8 · 0.6% likely

    CWE-89

20. A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL via /sys/user/e…CVE-2024-24015Xxyopen · CVSS 9.8 · 0.6% likely

    CWE-89

21. xxyopen Novel-Plus searchByPage sql injectionCVE-2025-3856xxyopen · CVSS 6.3 · 0.6% likely

    CWE-89

22. A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL injection via /…CVE-2024-24019Xxyopen · CVSS 9.8 · 0.6% likely

    CWE-89

23. A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to perform SQL injection via /nov…CVE-2024-24013Xxyopen · CVSS 9.8 · 0.6% likely

    CWE-89

24. xxyopen Novel-Plus list sql injectionCVE-2025-3369xxyopen · CVSS 6.3 · 0.6% likely

    CWE-89

25. xxyopen Novel-Plus books sql injectionCVE-2025-3676xxyopen · CVSS 6.3 · 0.6% likely

    CWE-89

26. xxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injectionCVE-2025-6535xxyopen · CVSS 6.3 · 0.5% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.