Total
20792 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-27250 | 1 Online Book Store Project Project | 1 Online Book Store Project | 2026-06-17 | N/A | 9.8 CRITICAL |
| Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php. | |||||
| CVE-2023-27233 | 1 Piwigo | 1 Piwigo | 2026-06-17 | N/A | 8.8 HIGH |
| Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_list_backend.php. | |||||
| CVE-2023-27214 | 1 Online Student Management System Project | 1 Online Student Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/student/between-date-reprtsdetails.php. | |||||
| CVE-2023-27213 | 1 Online Student Management System Project | 1 Online Student Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Online Student Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /eduauth/student/search.php. | |||||
| CVE-2023-27210 | 1 Online Pizza Ordering System Project | 1 Online Pizza Ordering System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/view_order.php. | |||||
| CVE-2023-27207 | 1 Online Pizza Ordering System Project | 1 Online Pizza Ordering System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manage_user.php. | |||||
| CVE-2023-27113 | 1 A54552239 | 1 Pearprojectapi | 2026-06-17 | N/A | 9.8 CRITICAL |
| pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php. | |||||
| CVE-2023-27112 | 1 A54552239 | 1 Pearprojectapi | 2026-06-17 | N/A | 9.8 CRITICAL |
| pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php. | |||||
| CVE-2023-27074 | 1 Phpgurukul | 1 Bp Monitoring Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| BP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via the emailid parameter in the login page. | |||||
| CVE-2023-27052 | 1 Moosikay Project | 1 Moosikay | 2026-06-17 | N/A | 9.8 CRITICAL |
| E-Commerce System v1.0 ws discovered to contain a SQL injection vulnerability via the id parameter at /admin/delete_user.php. | |||||
| CVE-2023-27041 | 1 School Registration And Fee System Project | 1 School Registration And Fee System | 2026-06-17 | N/A | 9.8 CRITICAL |
| School Registration and Fee System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at/bilal final/edit_user.php. | |||||
| CVE-2023-27037 | 1 Qibosoft | 1 Qibocms | 2026-06-17 | N/A | 8.8 HIGH |
| Qibosoft QiboCMS v7 was discovered to contain a remote code execution (RCE) vulnerability via the Get_Title function at label_set_rs.php | |||||
| CVE-2023-27034 | 1 Joommasters | 1 Jms Blog | 2026-06-17 | N/A | 9.8 CRITICAL |
| PrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability. | |||||
| CVE-2023-27032 | 1 Idnovate | 1 Popup Module \(on Entering\, Exit Popup\, Add Product\) And Newsletter | 2026-06-17 | N/A | 9.8 CRITICAL |
| Prestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a SQL injection vulnerability via the component AdvancedPopup::getPopups(). | |||||
| CVE-2023-26959 | 1 Phpgurukul | 1 Park Ticketing Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter. | |||||
| CVE-2023-26922 | 1 Variscite | 1 Matrix-gui | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute arbitrary code via the shell_exect parameter to the \www\pages\matrix-gui-2.0 endpoint. | |||||
| CVE-2023-26905 | 1 Alphaware - Simple E-commerce System Project | 1 Alphaware - Simple E-commerce System | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection that can directly issue instructions to the background database system via /alphaware/details.php?id. | |||||
| CVE-2023-26876 | 1 Piwigo | 1 Piwigo | 2026-06-17 | N/A | 8.8 HIGH |
| SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&filter_image_id=&filter_user_id endpoint. | |||||
| CVE-2023-26865 | 1 Brandsdistribution | 1 Bdroppy | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL injection vulnerability found in PrestaShop bdroppy v.2.2.12 and before allowing a remote attacker to gain privileges via the BdroppyCronModuleFrontController::importProducts component. | |||||
| CVE-2023-26864 | 1 Smplredirectionsmanager Project | 1 Smplredirectionsmanager | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL injection vulnerability found in PrestaShop smplredirectionsmanager v.1.1.19 and before allow a remote attacker to gain privileges via the SmplTools::getMatchingRedirectionsFromPartscomponent. | |||||