Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness SQL InjectionCWE-89 × clear
Xoogallery CRITICAL 9.1
CVE-2019-25523

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code …

No fix yet
Fix from $2,300 2026-03-12
Xoogallery CRITICAL 9.1
CVE-2019-25524

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code …

No fix yet
Fix from $2,300 2026-03-12
Inout Homestay CRITICAL 9.1
CVE-2019-25525

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by…

No fix yet
Fix from $2,300 2026-03-12
Php Stock News Site Script CRITICAL 9.8
CVE-2019-25515

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administration panel that allows unauthent…

Mitigation only
Fix from $2,300 2026-03-12
Php Stock News Site Script HIGH 7.5
CVE-2019-25516

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie…

No fix yet
Fix from $1,950 2026-03-12
Php Stock News Site Script HIGH 8.2
CVE-2019-25517

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie…

No fix yet
Fix from $1,950 2026-03-12
Php Stock News Site Script HIGH 8.2
CVE-2019-25518

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie…

No fix yet
Fix from $1,950 2026-03-12
Php Stock News Site Script HIGH 8.2
CVE-2019-25519

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting m…

No fix yet
Fix from $1,950 2026-03-12
Php Stock News Site Script CRITICAL 9.8
CVE-2019-25520

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated att…

Mitigation only
Fix from $2,300 2026-03-12
Php Stock News Site Script CRITICAL 9.8
CVE-2019-25510

Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated att…

Mitigation only
Fix from $2,300 2026-03-12
Php Stock News Site Script HIGH 8.2
CVE-2019-25511

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie…

No fix yet
Fix from $1,950 2026-03-12
Php Stock News Site Script HIGH 8.2
CVE-2019-25512

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the …

No fix yet
Fix from $1,950 2026-03-12
Php Stock News Site Script CRITICAL 9.8
CVE-2019-25513

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie…

Mitigation only
Fix from $2,300 2026-03-12
Php Stock News Site Script CRITICAL 9.8
CVE-2019-25514

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the …

Mitigation only
Fix from $2,300 2026-03-12
Unclassified HIGH 8.2
CVE-2019-25479

Inout RealEstate contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code t…

No fix yet
Fix from $1,950 2026-03-12
Unclassified HIGH 8.2
CVE-2019-25481

iScripts ReserveLogic contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL c…

No fix yet
Fix from $1,950 2026-03-12
Php Ready Rent A Car Site Script HIGH 8.2
CVE-2019-25482

Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database q…

No fix yet
Fix from $1,950 2026-03-12
Php Ready Rent A Car Site Script CRITICAL 9.8
CVE-2019-25488

Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauthenticated attackers to manipu…

Mitigation only
Fix from $2,300 2026-03-12
Php Ready Advertisement Site Script HIGH 8.2
CVE-2019-25508

Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries…

No fix yet
Fix from $1,950 2026-03-12
Unclassified HIGH 8.2
CVE-2019-25509

XooDigital Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code …

No fix yet
Fix from $1,950 2026-03-12
Unclassified HIGH 7.1
CVE-2019-25473

Clinic Pro contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through th…

No fix yet
Fix from $1,950 2026-03-12
Cafe Reservation System CRITICAL 9.8
CVE-2026-4014

A security flaw has been discovered in itsourcecode Cafe Reservation System 1.0. This impacts an unknown function of the file /curvus2/signup.php of …

Mitigation only
Fix from $2,300 2026-03-12
Online Doctor Appointment System CRITICAL 9.8
CVE-2026-3981

A vulnerability was found in itsourcecode Online Doctor Appointment System 1.0. Affected is an unknown function of the file /admin/doctor_action.php.…

Mitigation only
Fix from $2,300 2026-03-12
Online Doctor Appointment System CRITICAL 9.8
CVE-2026-3980

A vulnerability has been found in itsourcecode Online Doctor Appointment System 1.0. This impacts an unknown function of the file /admin/patient_acti…

Mitigation only
Fix from $2,300 2026-03-12
Unclassified HIGH 7.5
CVE-2026-3657

The My Sticky Bar plugin for WordPress is vulnerable to SQL injection via the `stickymenu_contact_lead_form` AJAX action in all versions up to, and i…

Mitigation only
Fix from $1,950 2026-03-12
Unclassified HIGH 7.3
CVE-2026-3969

A vulnerability was detected in FeMiner wms up to 1.0. This impacts an unknown function of the file /wms-master/src/basic/depart/depart_add_bg.php of…

Mitigation only
Fix from $1,950 2026-03-12
Openemr HIGH 8.8
CVE-2026-32127

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, OpenEMR contains a SQL inj…

Fix: 8.0.0.1+
Fix from $1,950 2026-03-11
Unclassified CRITICAL 9.8
CVE-2025-70024

An issue pertaining to CWE-89: Improper Neutralization of Special Elements used in an SQL Command was discovered in benkeen generatedata 4.0.14.

Mitigation only
Fix from $2,300 2026-03-11
Wegia HIGH 8.8
CVE-2026-31895

WeGIA is a web manager for charitable institutions. Prior to version 3.6.6, WeGIA (Web gerenciador para instituições assistenciais) contains a SQL in…

Fix: 3.6.6+
Fix from $1,950 2026-03-11
Wegia CRITICAL 9.8
CVE-2026-31896

WeGIA is a web manager for charitable institutions. Prior to version 3.6.6, a critical SQL injection vulnerability exists in the WeGIA application. T…

Fix: 3.6.6+
Fix from $2,300 2026-03-11