Total
20803 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-43640 | 1 Speciesfilegroup | 1 Taxonworks | 2026-06-17 | N/A | 6.5 MEDIUM |
| TaxonWorks is a web-based workbench designed for taxonomists and biodiversity scientists. Prior to version 0.34.0, a SQL injection vulnerability was found in TaxonWorks that allows authenticated attackers to extract arbitrary data from the TaxonWorks database (including the users table). This issue may lead to information disclosure. Version 0.34.0 contains a fix for the issue. | |||||
| CVE-2023-43610 | 1 Welcart | 1 Welcart E-commerce | 2026-06-17 | N/A | 8.8 HIGH |
| SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor (without setting authority) or higher privilege to perform unintended database operations. | |||||
| CVE-2023-43507 | 1 Arubanetworks | 1 Clearpass Policy Manager | 2026-06-17 | N/A | 7.2 HIGH |
| A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster. | |||||
| CVE-2023-43493 | 1 Welcart | 1 Welcart E-commerce | 2026-06-17 | N/A | 4.9 MEDIUM |
| SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain sensitive information. | |||||
| CVE-2023-43470 | 1 Janobe | 1 Online Voting System | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php component. | |||||
| CVE-2023-43469 | 1 Online Job Portal Project | 1 Online Job Portal | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the ForPass.php component. | |||||
| CVE-2023-43468 | 1 Online Job Portal Project | 1 Online Job Portal | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the login.php component. | |||||
| CVE-2023-43381 | 1 Tianchoy | 1 Blog | 2026-06-17 | N/A | 7.5 HIGH |
| SQL Injection vulnerability in Tianchoy Blog v.1.8.8 allows a remote attacker to obtain sensitive information via the id parameter in the login.php | |||||
| CVE-2023-43377 | 1 Digitaldruid | 1 Hoteldruid | 2026-06-17 | N/A | 5.4 MEDIUM |
| A cross-site scripting (XSS) vulnerability in /hoteldruid/visualizza_contratto.php of Hoteldruid v3.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the destinatario_email1 parameter. | |||||
| CVE-2023-43375 | 1 Digitaldruid | 1 Hoteldruid | 2026-06-17 | N/A | 9.8 CRITICAL |
| Hoteldruid v3.0.5 was discovered to contain multiple SQL injection vulnerabilities at /hoteldruid/clienti.php via the annonascita, annoscaddoc, giornonascita, giornoscaddoc, lingua_cli, mesenascita, and mesescaddoc parameters. | |||||
| CVE-2023-43374 | 1 Digitaldruid | 1 Hoteldruid | 2026-06-17 | N/A | 9.8 CRITICAL |
| Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the id_utente_log parameter at /hoteldruid/personalizza.php. | |||||
| CVE-2023-43373 | 1 Digitaldruid | 1 Hoteldruid | 2026-06-17 | N/A | 9.8 CRITICAL |
| Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the n_utente_agg parameter at /hoteldruid/interconnessioni.php. | |||||
| CVE-2023-43371 | 1 Digitaldruid | 1 Hoteldruid | 2026-06-17 | N/A | 9.8 CRITICAL |
| Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the numcaselle parameter at /hoteldruid/creaprezzi.php. | |||||
| CVE-2023-43274 | 1 Phpjabbers | 1 Php Shopping Cart | 2026-06-17 | N/A | 7.5 HIGH |
| Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter. | |||||
| CVE-2023-43192 | 1 Jrecms | 1 Springbootcms | 2026-06-17 | N/A | 8.8 HIGH |
| SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered. As a result, special characters in parameters destroy the original logic of SQL statements. Attackers can use this vulnerability to execute any SQL statement. | |||||
| CVE-2023-43144 | 1 Projectworlds | 1 Asset Management System Project In Php | 2026-06-17 | N/A | 9.8 CRITICAL |
| Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php. | |||||
| CVE-2023-43132 | 1 Szvone | 1 Vmqphp | 2026-06-17 | N/A | 6.5 MEDIUM |
| szvone vmqphp <=1.13 is vulnerable to SQL Injection. Unauthorized remote users can use sql injection attacks to obtain the hash of the administrator password. | |||||
| CVE-2023-43014 | 1 Projectworlds | 1 Asset Management System | 2026-06-17 | N/A | 8.8 HIGH |
| Asset Management System v1.0 is vulnerable to an Authenticated SQL Injection vulnerability on the 'first_name' and 'last_name' parameters of user.php page, allowing an authenticated attacker to dump all the contents of the database contents. | |||||
| CVE-2023-43013 | 1 Projectworlds | 1 Asset Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Asset Management System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'email' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control. | |||||
| CVE-2023-42807 | 1 Frappe | 1 Learning | 2026-06-17 | N/A | 6.3 MEDIUM |
| Frappe LMS is an open source learning management system. In versions 1.0.0 and prior, on the People Page of LMS, there was an SQL Injection vulnerability. The issue has been fixed in the `main` branch. Users won't face this issue if they are using the latest main branch of the app. | |||||