CWE-89

CVE-2022-36529

February 23, 2023 by godfreyd94

Kensite CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities via the name and oldname parameters at /framework/mod/db/DBMapper.xml.

CVE-2022-36543

February 23, 2023 by godfreyd94

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/doctors.php.

CVE-2022-36544

February 23, 2023 by godfreyd94

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/booking.php.

CVE-2022-36545

February 23, 2023 by godfreyd94

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/settings.php.

CVE-2022-36394

February 23, 2023 by godfreyd94

Authenticated (author+) SQL Injection (SQLi) vulnerability in Contest Gallery plugin <= 17.0.4 at WordPress.

CVE-2022-36193

February 23, 2023 by godfreyd94

SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the application’s content or behavior by using malicious SQL queries.