CWE-89 · weakness in SQL Injection
SQL Injection
21,717 CVEs · 32 exploited
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 32
- check available
- 479
- likely to be exploited
- 394
Every one of the 21,717 is a mark on the map. Named now: 287 to 312, most at risk first.
- G Auto-Hyperlink <= 1.0.1 - SQL Injection
- Pie Register < 3.7.1.6 - SQL Injection
- PHPGurukul Hospital Management System 4.0 - SQL Injection
- Hospital Management System 1.0 - SQL Injection
- ZoneMinder - SQL Injection
- Atom CMS v2.0 - SQL Injection
- PHPSHE 1.7 - SQL Injection
- openSIS < 9.1 - SQL Injection
- Doctor Appointment System 1.0 - SQL Injection
- Youzify < 1.2.0 - Unauthenticated SQLi
- WP-Recall <= 16.26.5 - SQL Injection
- AnteeoWMS < v4.7.34 - SQL Injection
- Cuppa CMS v1.0 - SQL injection
- SuiteCRM - SQL Injection
- Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4 - Unauthenticated Blind SQL Injection
- 10Web Photo Gallery < 1.5.55 - SQL Injection
- MStore API < 3.9.8 - SQL Injection
- Mingsoft MCMS v5.2.7 - SQL Injection
- WordPress zm-gallery plugin 1.0 SQL Injection
- CyberPower < v2.8.3 - SQL Injection
- CyberPower - SQL Injection
- CyberPower < v2.8.3 - SQL Injection
- Car Rental Management System 1.0 - SQL Injection
- Hospital Management System 1.0 - SQL Injection
- WordPress IWS Geo Form Fields <=1.0 - SQL Injection
- NotificationX Dropshipping < 4.4 - SQL Injection
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.