Vulnerabilities (CVE)

Filtered by CWE-89
Total 20789 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-40122 1 Online Banking System Project 1 Online Banking System 2026-06-17 N/A 9.8 CRITICAL
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/edit_customer_action.php.
CVE-2022-40121 1 Online Banking System Project 1 Online Banking System 2026-06-17 N/A 9.8 CRITICAL
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/manage_customers.php.
CVE-2022-40120 1 Online Banking System Project 1 Online Banking System 2026-06-17 N/A 9.8 CRITICAL
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search_term parameter at /net-banking/customer_transactions.php.
CVE-2022-40119 1 Online Banking System Project 1 Online Banking System 2026-06-17 N/A 9.8 CRITICAL
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search_term parameter at /net-banking/transactions.php.
CVE-2022-40118 1 Online Banking System Project 1 Online Banking System 2026-06-17 N/A 9.8 CRITICAL
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/send_funds_action.php.
CVE-2022-40117 1 Online Banking System Project 1 Online Banking System 2026-06-17 N/A 9.8 CRITICAL
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/delete_customer.php.
CVE-2022-40116 1 Online Banking System Project 1 Online Banking System 2026-06-17 N/A 9.8 CRITICAL
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/beneficiary.php.
CVE-2022-40115 1 Online Banking System Project 1 Online Banking System 2026-06-17 N/A 9.8 CRITICAL
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/delete_beneficiary.php.
CVE-2022-40114 1 Online Banking System Project 1 Online Banking System 2026-06-17 N/A 9.8 CRITICAL
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/edit_customer.php.
CVE-2022-40113 1 Online Banking System Project 1 Online Banking System 2026-06-17 N/A 9.8 CRITICAL
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/send_funds.php.
CVE-2022-40099 1 Online Tours \& Travels Management System Project 1 Online Tours \& Travels Management System 2026-06-17 N/A 7.2 HIGH
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_expense_category.php.
CVE-2022-40098 1 Online Tours \& Travels Management System Project 1 Online Tours \& Travels Management System 2026-06-17 N/A 7.2 HIGH
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_expense.php.
CVE-2022-40097 1 Online Tours And Travels Management System Project 1 Online Tours And Travels Management System 2026-06-17 N/A 7.2 HIGH
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_currency.php.
CVE-2022-40093 1 Online Tours And Travels Management System Project 1 Online Tours And Travels Management System 2026-06-17 N/A 7.2 HIGH
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_tax.php.
CVE-2022-40092 1 Online Tours And Travels Management System Project 1 Online Tours And Travels Management System 2026-06-17 N/A 7.2 HIGH
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_payment.php.
CVE-2022-40091 1 Online Tours And Travels Management System Project 1 Online Tours And Travels Management System 2026-06-17 N/A 7.2 HIGH
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_packages.php.
CVE-2022-40049 1 Theme Park Ticketing System Project 1 Theme Park Ticketing System 2026-06-17 N/A 7.5 HIGH
SQL injection vulnerability in sourcecodester Theme Park Ticketing System 1.0 allows remote attackers to view sensitive information via the id parameter to the /tpts/manage_user.php page.
CVE-2022-40043 1 Centreon 1 Centreon 2026-06-17 N/A 8.8 HIGH
Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations.
CVE-2022-40032 1 Simple Task Managing System Project 1 Simple Task Managing System 2026-06-17 N/A 9.8 CRITICAL
SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information.
CVE-2022-40026 1 Simple Task Managing System Project 1 Simple Task Managing System 2026-06-17 N/A 7.2 HIGH
SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at board.php.