ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://blog.orangehrm.com/2011/12/09/security-vulnerabilities-fixed-with-orangehrm-26112/

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_orangehrm.html	x_refsource_MISC x_transferred
http://www.securityfocus.com/archive/1/520684/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://osvdb.org/show/osvdb/77418	vdb-entry x_refsource_OSVDB x_transferred
http://www.securityfocus.com/bid/50857	vdb-entry x_refsource_BID x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/71569	vdb-entry x_refsource_XF x_transferred
http://secunia.com/advisories/47014	third-party-advisory x_refsource_SECUNIA x_transferred
http://blog.orangehrm.com/2011/12/09/security-vulnerabilities-fixed-with-orangehrm-26112/	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_orangehrm.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/520684/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://osvdb.org/show/osvdb/77418

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://www.securityfocus.com/bid/50857

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/71569

Resource:

vdb-entry

x_refsource_XF

x_transferred

cpe:2.3:a:orangehrm:orangehrm:*:*:*:*:*:*:*:*

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://blog.orangehrm.com/2011/12/09/security-vulnerabilities-fixed-with-orangehrm-26112/

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:12 Feb, 2013 | 20:55

Updated At:11 Apr, 2025 | 00:51

SQL injection vulnerability in lib/controllers/CentralController.php in OrangeHRM before 2.6.11.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

orangehrm>>orangehrm>>Versions up to 2.6.11(inclusive)

orangehrm>>orangehrm>>2.6.0

cpe:2.3:a:orangehrm:orangehrm:2.6.0:*:*:*:*:*:*:*

orangehrm>>orangehrm>>2.6.0.1

cpe:2.3:a:orangehrm:orangehrm:2.6.0.1:*:*:*:*:*:*:*

orangehrm>>orangehrm>>2.6.1

cpe:2.3:a:orangehrm:orangehrm:2.6.1:*:*:*:*:*:*:*

orangehrm>>orangehrm>>2.6.2

cpe:2.3:a:orangehrm:orangehrm:2.6.2:*:*:*:*:*:*:*

orangehrm>>orangehrm>>2.6.3

cpe:2.3:a:orangehrm:orangehrm:2.6.3:*:*:*:*:*:*:*

orangehrm>>orangehrm>>2.6.4

cpe:2.3:a:orangehrm:orangehrm:2.6.4:*:*:*:*:*:*:*

orangehrm>>orangehrm>>2.6.5

cpe:2.3:a:orangehrm:orangehrm:2.6.5:*:*:*:*:*:*:*

orangehrm>>orangehrm>>2.6.6

cpe:2.3:a:orangehrm:orangehrm:2.6.6:*:*:*:*:*:*:*

orangehrm>>orangehrm>>2.6.7

cpe:2.3:a:orangehrm:orangehrm:2.6.7:*:*:*:*:*:*:*

orangehrm>>orangehrm>>2.6.8

cpe:2.3:a:orangehrm:orangehrm:2.6.8:*:*:*:*:*:*:*

orangehrm>>orangehrm>>2.6.8.1

cpe:2.3:a:orangehrm:orangehrm:2.6.8.1:*:*:*:*:*:*:*

orangehrm>>orangehrm>>2.6.9

cpe:2.3:a:orangehrm:orangehrm:2.6.9:*:*:*:*:*:*:*

orangehrm>>orangehrm>>2.6.10

cpe:2.3:a:orangehrm:orangehrm:2.6.10:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-89	Primary	nvd@nist.gov

CWE ID: CWE-89

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://blog.orangehrm.com/2011/12/09/security-vulnerabilities-fixed-with-orangehrm-26112/	cve@mitre.org	Vendor Advisory
http://osvdb.org/show/osvdb/77418	cve@mitre.org	Exploit
http://secunia.com/advisories/47014	cve@mitre.org	Vendor Advisory
http://www.securityfocus.com/archive/1/520684/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/50857	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/71569	cve@mitre.org	N/A
https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_orangehrm.html	cve@mitre.org	N/A
http://blog.orangehrm.com/2011/12/09/security-vulnerabilities-fixed-with-orangehrm-26112/	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://osvdb.org/show/osvdb/77418	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://secunia.com/advisories/47014	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/archive/1/520684/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/50857	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/71569	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_orangehrm.html	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://blog.orangehrm.com/2011/12/09/security-vulnerabilities-fixed-with-orangehrm-26112/

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://osvdb.org/show/osvdb/77418

Source: cve@mitre.org

Resource:

Exploit

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/archive/1/520684/100/0/threaded

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/50857

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/71569

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_orangehrm.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://blog.orangehrm.com/2011/12/09/security-vulnerabilities-fixed-with-orangehrm-26112/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://osvdb.org/show/osvdb/77418

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/archive/1/520684/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/50857

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/71569

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_orangehrm.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

364Records found

CVE-2010-4798

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-1.11% / 77.81%

7 Day CHG~0.00%

Published-27 Apr, 2011 | 00:00

Updated-11 Apr, 2025 | 00:51

Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uri parameter.

Vendor-orangehrm n/a

Product-orangehrm n/a

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2024-36428

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-77.10% / 98.94%

7 Day CHG~0.00%

Published-27 May, 2024 | 22:48

Updated-23 Jun, 2025 | 18:09

OrangeHRM 3.3.3 allows admin/viewProjects sortOrder SQL injection.

Vendor-orangehrm n/a orangehrm

Product-orangehrm n/a orangehrm

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2012-5367

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6||MEDIUM

EPSS-1.19% / 78.52%

7 Day CHG~0.00%

Published-03 Dec, 2012 | 21:00

Updated-11 Apr, 2025 | 00:51

Multiple SQL injection vulnerabilities in OrangeHRM 2.7.1 RC 1 allow remote authenticated administrators to execute arbitrary SQL commands via the sortField parameter to (1) viewCustomers, (2) viewPayGrades, or (3) viewSystemUsers in symfony/web/index.php/admin/, as demonstrated using cross-site request forgery (CSRF) attacks.

Vendor-orangehrm n/a

Product-orangehrm n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2012-1506

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-2.32% / 84.47%

7 Day CHG~0.00%

Published-17 Sep, 2014 | 14:00

Updated-12 Apr, 2025 | 10:46

SQL injection vulnerability in the updateStatus function in lib/models/benefits/Hsp.php in OrangeHRM before 2.7 allows remote authenticated users to execute arbitrary SQL commands via the hspSummaryId parameter to plugins/ajaxCalls/haltResumeHsp.php. NOTE: some of these details are obtained from third party information.

Vendor-orangehrm n/a

Product-orangehrm n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2020-29437

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-1.24% / 78.89%

7 Day CHG~0.00%

Published-05 Jan, 2021 | 20:30

Updated-04 Aug, 2024 | 16:55

SQL injection in the Buzz module of OrangeHRM through 4.6 allows remote authenticated attackers to execute arbitrary SQL commands via the orangehrmBuzzPlugin/lib/dao/BuzzDao.php loadMorePostsForm[profileUserId] parameter to the buzz/loadMoreProfile endpoint.

Vendor-orangehrm n/a

Product-orangehrm n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2021-46436

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-7.2||HIGH

EPSS-0.26% / 48.46%

7 Day CHG~0.00%

Published-08 Apr, 2022 | 10:06

Updated-04 Aug, 2024 | 05:02

An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in ad_manage.php.

Vendor-zzcms n/a

Product-zzcms n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2021-44593

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-5.37% / 89.87%

7 Day CHG~0.00%

Published-21 Jan, 2022 | 18:08

Updated-04 Aug, 2024 | 04:25

Simple College Website 1.0 is vulnerable to unauthenticated file upload & remote code execution via UNION-based SQL injection in the username parameter on /admin/login.php.

Vendor-simple_college_website_project n/a

Product-simple_college_website n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2008-6986

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.66% / 70.65%

7 Day CHG~0.00%

Published-18 Aug, 2009 | 10:00

Updated-07 Aug, 2024 | 11:49

SQL injection vulnerability in the actionMultipleAddProduct function in includes/classes/shopping_cart.php in Zen Cart 1.3.0 through 1.3.8a, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the products_id array parameter in a multiple_products_add_product action, a different vulnerability than CVE-2008-6985.

Vendor-zen-cart n/a

Product-zen_cart n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2021-43822

Matching Score-4

Assigner-GitHub, Inc.

Matching Score-4

Assigner-GitHub, Inc.

CVSS Score-8.5||HIGH

EPSS-0.24% / 47.13%

7 Day CHG~0.00%

Published-13 Dec, 2021 | 19:50

Updated-04 Aug, 2024 | 04:03

SQL injection in jackalope/jackalope-doctrine-dbal

Jackalope Doctrine-DBAL is an implementation of the PHP Content Repository API (PHPCR) using a relational database to persist data. In affected versions users can provoke SQL injections if they can specify a node name or query. Upgrade to version 1.7.4 to resolve this issue. If that is not possible, you can escape all places where `$property` is used to filter `sv:name` in the class `Jackalope\Transport\DoctrineDBAL\Query\QOMWalker`: `XPath::escape($property)`. Node names and xpaths can contain `"` or `;` according to the JCR specification. The jackalope component that translates the query object model into doctrine dbal queries does not properly escape the names and paths, so that a accordingly crafted node name can lead to an SQL injection. If queries are never done from user input, or if you validate the user input to not contain `;`, you are not affected.

Vendor-jackalope_doctrine-dbal_project jackalope

Product-jackalope_doctrine-dbal jackalope-doctrine-dbal

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2021-42258

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-93.66% / 99.83%

7 Day CHG~0.00%

Published-22 Oct, 2021 | 21:25

Updated-10 Nov, 2025 | 14:43

Known KEV||Action Due Date - 2021-11-17||Apply updates per vendor instructions.

BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation. SQL injection can, for example, use the txtID (aka username) parameter. Successful exploitation can include the ability to execute arbitrary code as MSSQLSERVER$ via xp_cmdshell.

Vendor-bqe n/a BQE

Product-billquick_web_suite n/a BillQuick Web Suite

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2021-41679

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.56% / 67.75%

7 Day CHG~0.00%

Published-30 Nov, 2021 | 13:17

Updated-04 Aug, 2024 | 03:15

A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the /opensis/modules/grades/InputFinalGrades.php, period parameter.

Vendor-os4ed n/a

Product-opensis n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2021-42064

Matching Score-4

Assigner-SAP SE

Matching Score-4

Assigner-SAP SE

CVSS Score-9.8||CRITICAL

EPSS-0.62% / 69.53%

7 Day CHG~0.00%

Published-14 Dec, 2021 | 15:44

Updated-04 Aug, 2024 | 03:22

If configured to use an Oracle database and if a query is created using the flexible search java api with a parameterized "in" clause, SAP Commerce - versions 1905, 2005, 2105, 2011, allows attacker to execute crafted database queries, exposing backend database. The vulnerability is present if the parameterized "in" clause accepts more than 1000 values.

Vendor-SAP SE

Product-commerce SAP Commerce

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2021-41677

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.38% / 59.08%

7 Day CHG~0.00%

Published-30 Nov, 2021 | 12:59

Updated-04 Aug, 2024 | 03:15

Vendor-os4ed n/a

Product-opensis n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2021-41678

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.56% / 67.75%

7 Day CHG~0.00%

Published-30 Nov, 2021 | 13:07

Updated-04 Aug, 2024 | 03:15

Vendor-os4ed n/a

Product-opensis n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2008-6250

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.70% / 71.62%

7 Day CHG~0.00%

Published-23 Feb, 2009 | 17:00

Updated-07 Aug, 2024 | 11:20

SQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter to a blog page.

Vendor-comdev n/a

Product-comdev_web_blogger n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2008-6093

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.32% / 54.80%

7 Day CHG+0.03%

Published-09 Feb, 2009 | 17:00

Updated-07 Aug, 2024 | 11:20

SQL injection vulnerability in index.php in Noname CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the (1) file_id parameter in a detailansicht action and the (2) kategorie parameter in a kategorien action.

Vendor-noname-cms n/a

Product-noname_cms n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2019-9053

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-92.56% / 99.73%

7 Day CHG~0.00%

Published-26 Mar, 2019 | 16:15

Updated-17 Nov, 2025 | 20:15

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter.

Vendor-n/a The CMS Made Simple Foundation

Product-cms_made_simple n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2008-4145

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.41% / 61.07%

7 Day CHG~0.00%

Published-19 Sep, 2008 | 18:00

Updated-07 Aug, 2024 | 10:08

SQL injection vulnerability in user_read_links.php in Addalink 1.0 beta 4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category_id parameter.

Vendor-addalink n/a

Product-addalink n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2019-7548

Matching Score-4

Assigner-MITRE Corporation

Product-sqlalchemy communications_operations_monitor debian_linux enterprise_linux_server_aus enterprise_linux enterprise_linux_eus backports_sle enterprise_linux_server_tus leap n/a

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-1.04% / 77.02%

7 Day CHG~0.00%

Published-06 Feb, 2019 | 21:00

Updated-04 Aug, 2024 | 20:54

SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.

Vendor-sqlalchemy n/a openSUSE Red Hat, Inc.Oracle Corporation Debian GNU/Linux

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2008-3561

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.38% / 58.72%

7 Day CHG~0.00%

Published-10 Aug, 2008 | 20:00

Updated-07 Aug, 2024 | 09:45

SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the ag parameter.

Vendor-powergap n/a

Product-shopsystem n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2019-5150

Matching Score-4

Assigner-Talos

Matching Score-4

Assigner-Talos

CVSS Score-8.9||HIGH

EPSS-0.37% / 58.34%

7 Day CHG~0.00%

Published-31 Oct, 2019 | 19:32

Updated-04 Aug, 2024 | 19:47

An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. When the "VideoTags" plugin is enabled, a specially crafted unauthenticated HTTP request can cause a SQL injection, possibly leading to denial of service, exfiltration of the database and local file inclusion, which could potentially further lead to code execution. An attacker can send an HTTP request to trigger this vulnerability.

Vendor-youphptube n/a

Product-youphptube YouPHPTube

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2008-1789

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.41% / 61.07%

7 Day CHG~0.00%

Published-15 Apr, 2008 | 17:00

Updated-07 Aug, 2024 | 08:32

SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter.

Vendor-prozilla n/a

Product-forum n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2008-1462

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.41% / 61.07%

7 Day CHG~0.00%

Published-24 Mar, 2008 | 21:00

Updated-07 Aug, 2024 | 08:24

SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action.

Vendor-runcms n/a

Product-runcms n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2008-5123

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.49% / 65.13%

7 Day CHG~0.00%

Published-18 Nov, 2008 | 00:00

Updated-07 Aug, 2024 | 10:40

SQL injection vulnerability in admin.php in CCleague Pro 1.2 allows remote attackers to execute arbitrary SQL commands via the u parameter.

Vendor-castillocentral n/a

Product-ccleague n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2019-20613

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-0.16% / 36.80%

7 Day CHG~0.00%

Published-24 Mar, 2020 | 19:28

Updated-05 Aug, 2024 | 02:46

An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. There is time-based SQL injection in Contacts. The Samsung ID is SVE-2018-13452 (March 2019).

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2019-20059

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-1.46% / 80.53%

7 Day CHG~0.00%

Published-10 Feb, 2020 | 12:13

Updated-05 Aug, 2024 | 02:32

payment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.4 directly insert values from the sSortDir_0 parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database, aka SQL Injection. NOTE: this issue exists because of an incomplete fix for CVE-2019-19732.

Vendor-mfscripts n/a

Product-yetishare n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2008-0453

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.46% / 63.68%

7 Day CHG~0.00%

Published-24 Jan, 2008 | 23:00

Updated-07 Aug, 2024 | 07:46

SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL commands via the categoryid parameter.

Vendor-easysitenetwork n/a

Product-recipe_website_script n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2021-40909

Matching Score-4

Assigner-MITRE Corporation

Vendor-php_crud_without_refresh\/reload_using_ajax_and_datatables_tutorial_project n/a

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-9.6||CRITICAL

EPSS-1.40% / 80.09%

7 Day CHG~0.00%

Published-24 Jan, 2022 | 15:15

Updated-04 Aug, 2024 | 02:59

Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the first_name, last_name, and email parameters to /ajax_crud.

Product-php_crud_without_refresh\/reload_using_ajax_and_datatables_tutorial n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2017-17916

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-0.59% / 68.52%

7 Day CHG~0.00%

Published-29 Dec, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

SQL injection vulnerability in the 'find_by' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input

Vendor-n/a Ruby on Rails

Product-rails n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2012-5701

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-3.39% / 87.11%

7 Day CHG~0.00%

Published-20 Oct, 2014 | 15:00

Updated-12 Apr, 2025 | 10:46

Multiple SQL injection vulnerabilities in dotProject before 2.1.7 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) search_string or (2) where parameter in a contacts action, (3) dept_id parameter in a departments action, (4) project_id[] parameter in a project action, or (5) company_id parameter in a system action to index.php. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.

Vendor-dotproject n/a

Product-dotproject n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2012-5694

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.43% / 62.40%

7 Day CHG~0.00%

Published-20 Oct, 2014 | 16:00

Updated-12 Apr, 2025 | 10:46

Multiple SQL injection vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allow remote attackers to execute arbitrary SQL commands via the (1) agentPhNo, (2) controlPhNo, (3) agentURLPath, (4) agentControlKey, or (5) platformDD1 parameter to frameworkgui/attach2Agents.pl; the (6) modemPhoneNo, (7) controlKey, or (8) appURLPath parameter to frameworkgui/attachMobileModem.pl; the agentsDD parameter to (9) escalatePrivileges.pl, (10) getContacts.pl, (11) getDatabase.pl, (12) sendSMS.pl, or (13) takePic.pl in frameworkgui/; or the modemNoDD parameter to (14) escalatePrivileges.pl, (15) getContacts.pl, (16) getDatabase.pl, (17) SEAttack.pl, (18) sendSMS.pl, (19) takePic.pl, or (20) CSAttack.pl in frameworkgui/.

Vendor-bulbsecurity n/a

Product-smartphone_pentest_framework n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2012-4237

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.42% / 61.14%

7 Day CHG~0.00%

Published-20 Aug, 2012 | 20:00

Updated-11 Apr, 2025 | 00:51

Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the subject_module_id parameter to (1) tce_edit_answer.php or (2) tce_edit_question.php.

Vendor-tecnick n/a

Product-tcexam n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2018-7765

Matching Score-4

Assigner-Schneider Electric

Matching Score-4

Assigner-Schneider Electric

CVSS Score-8.8||HIGH

EPSS-17.49% / 94.91%

7 Day CHG~0.00%

Published-03 Jul, 2018 | 14:00

Updated-17 Sep, 2024 | 00:22

The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the object_id input parameter.

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2019-12374

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-0.66% / 70.55%

7 Day CHG~0.00%

Published-03 Jun, 2019 | 19:26

Updated-04 Aug, 2024 | 23:17

A SQL Injection vulnerability exists in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 due to improper username sanitization in the Basic Authentication implementation in core/provisioning.secure/ProvisioningSecure.asmx in Provisioning.Secure.dll.

Vendor-n/a Ivanti Software

Product-landesk_management_suite n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2018-7773

Matching Score-4

Assigner-Schneider Electric

Matching Score-4

Assigner-Schneider Electric

CVSS Score-8.8||HIGH

EPSS-0.33% / 55.20%

7 Day CHG~0.00%

Published-03 Jul, 2018 | 14:00

Updated-16 Sep, 2024 | 17:18

The vulnerability exists within processing of nfcserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the sessionid input parameter.

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2012-0868

Matching Score-4

Assigner-Red Hat, Inc.

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-6.8||MEDIUM

EPSS-4.13% / 88.38%

7 Day CHG-0.11%

Published-18 Jul, 2012 | 23:00

Updated-11 Apr, 2025 | 00:51

CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQL script that is used when the database is restored.

Vendor-n/a The PostgreSQL Global Development Group

Product-postgresql n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2012-1656

Matching Score-4

Assigner-Red Hat, Inc.

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.50% / 65.39%

7 Day CHG~0.00%

Published-18 Sep, 2012 | 20:00

Updated-11 Apr, 2025 | 00:51

SQL injection vulnerability in the Multisite Search module 6.x-2.2 for Drupal allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the Site table prefix field.

Vendor-wesjones n/a The Drupal Association

Product-drupal multisite_search n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2019-11600

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-80.67% / 99.11%

7 Day CHG~0.00%

Published-13 May, 2019 | 19:57

Updated-04 Aug, 2024 | 22:55

A SQL injection vulnerability in the activities API in OpenProject before 8.3.2 allows a remote attacker to execute arbitrary SQL commands via the id parameter. The attack can be performed unauthenticated if OpenProject is configured not to require authentication for API access.

Vendor-openproject n/a

Product-openproject n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2016-6617

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-0.38% / 58.67%

7 Day CHG~0.00%

Published-11 Dec, 2016 | 02:00

Updated-12 Apr, 2025 | 10:46

An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions (prior to 4.6.4) are affected.

Vendor-n/a phpMyAdmin

Product-phpmyadmin n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2016-6652

Matching Score-4

Assigner-Dell

Matching Score-4

Assigner-Dell

CVSS Score-5.6||MEDIUM

EPSS-0.32% / 54.31%

7 Day CHG~0.00%

Published-05 Oct, 2016 | 16:00

Updated-12 Apr, 2025 | 10:46

SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call.

Vendor-n/a VMware (Broadcom Inc.)

Product-spring_data_jpa n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2011-4826

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.39% / 59.69%

7 Day CHG~0.00%

Published-15 Dec, 2011 | 02:00

Updated-11 Apr, 2025 | 00:51

SQL injection vulnerability in session.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to process.php. NOTE: some of these details are obtained from third party information.

Vendor-autosectools n/a

Product-v-cms n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2011-4959

Matching Score-4

Assigner-Red Hat, Inc.

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.72% / 71.92%

7 Day CHG~0.00%

Published-17 Sep, 2012 | 17:00

Updated-11 Apr, 2025 | 00:51

SQL injection vulnerability in the addslashes method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6, when connected to a MySQL database using far east character encodings, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Vendor-n/a Silverstripe

Product-silverstripe n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2011-4487

Matching Score-4

Assigner-Cisco Systems, Inc.

Product-business_edition_6000 business_edition_5000_software business_edition_3000 unified_communications_manager business_edition_3000_software business_edition_6000_software business_edition_5000 n/a

Matching Score-4

Assigner-Cisco Systems, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.34% / 56.38%

7 Day CHG~0.00%

Published-01 Mar, 2012 | 01:00

Updated-11 Apr, 2025 | 00:51

SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5 and 8.6 before 8.6(2a)su1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.6(2a)su1 allows remote attackers to execute arbitrary SQL commands via a crafted SCCP registration, aka Bug ID CSCtu73538.

Vendor-n/a Cisco Systems, Inc.

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2007-0527

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-1.07% / 77.36%

7 Day CHG~0.00%

Published-26 Jan, 2007 | 01:00

Updated-07 Aug, 2024 | 12:19

SQL injection vulnerability in the is_remembered function in class.login.php in Website Baker 2.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the REMEMBER_KEY cookie parameter. NOTE: some of these details are obtained from third party information.

Vendor-website_baker n/a

Product-website_baker n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2016-6616

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.32% / 54.27%

7 Day CHG~0.00%

Published-11 Dec, 2016 | 02:00

Updated-12 Apr, 2025 | 10:46

An issue was discovered in phpMyAdmin. In the "User group" and "Designer" features, a user can execute an SQL injection attack against the account of the control user. All 4.6.x versions (prior to 4.6.4) and 4.4.x versions (prior to 4.4.15.8) are affected.

Vendor-n/a phpMyAdmin

Product-phpmyadmin n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2006-6048

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-1.31% / 79.51%

7 Day CHG~0.00%

Published-22 Nov, 2006 | 00:00

Updated-07 Aug, 2024 | 20:12

SQL injection vulnerability in index.php in Etomite CMS 0.6.1.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.

Vendor-etomite n/a

Product-etomite n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2021-39302

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.26% / 49.55%

7 Day CHG~0.00%

Published-19 Aug, 2021 | 16:25

Updated-04 Aug, 2024 | 02:06

MISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php $conditions['org'] value.

Vendor-misp n/a

Product-misp n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2018-7766

Matching Score-4

Assigner-Schneider Electric

Matching Score-4

Assigner-Schneider Electric

CVSS Score-8.8||HIGH

EPSS-0.33% / 55.20%

7 Day CHG~0.00%

Published-03 Jul, 2018 | 14:00

Updated-16 Sep, 2024 | 18:23

The vulnerability exists within processing of track_getdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter.

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2018-7768

Matching Score-4

Assigner-Schneider Electric

Matching Score-4

Assigner-Schneider Electric

CVSS Score-8.8||HIGH

EPSS-0.33% / 55.20%

7 Day CHG~0.00%

Published-03 Jul, 2018 | 14:00

Updated-16 Sep, 2024 | 23:01

The vulnerability exists within processing of loadtemplate.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the tpl input parameter.

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2018-7767

Matching Score-4

Assigner-Schneider Electric

Matching Score-4

Assigner-Schneider Electric

CVSS Score-8.8||HIGH

EPSS-0.33% / 55.20%

7 Day CHG~0.00%

Published-03 Jul, 2018 | 14:00

Updated-17 Sep, 2024 | 02:42

The vulnerability exists within processing of editobject.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the type input parameter.