Total
20788 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2022-38118 | 1 Hgiga | 1 Oaklouds Portal | 2026-06-17 | N/A | 8.8 HIGH |
| OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service. | |||||
| CVE-2022-38074 | 1 Veronalabs | 1 Wp Statistics | 2026-06-17 | N/A | 7.1 HIGH |
| SQL Injection vulnerability in VeronaLabs WP Statistics plugin <= 13.2.10 versions. | |||||
| CVE-2022-37794 | 1 Library Management System Project | 1 Library Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection. | |||||
| CVE-2022-37333 | 1 Exceedone | 2 Exment, Laravel-admin | 2026-06-17 | N/A | 8.8 HIGH |
| SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows remote authenticated attackers to execute arbitrary SQL commands. | |||||
| CVE-2022-37223 | 1 Jflyfox | 1 Jfinal Cms | 2026-06-17 | N/A | 9.8 CRITICAL |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list. | |||||
| CVE-2022-37209 | 1 Jflyfox | 1 Jfinal Cms | 2026-06-17 | N/A | 8.8 HIGH |
| JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. | |||||
| CVE-2022-37208 | 1 Jflyfox | 1 Jfinal Cms | 2026-06-17 | N/A | 8.8 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. | |||||
| CVE-2022-37207 | 1 Jflyfox | 1 Jfinal Cms | 2026-06-17 | N/A | 8.8 HIGH |
| JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection | |||||
| CVE-2022-37205 | 1 Jflyfox | 1 Jfinal Cms | 2026-06-17 | N/A | 8.8 HIGH |
| JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. | |||||
| CVE-2022-37204 | 1 Jflyfox | 1 Jfinal Cms | 2026-06-17 | N/A | 9.8 CRITICAL |
| Final CMS 5.1.0 is vulnerable to SQL Injection. | |||||
| CVE-2022-37203 | 1 Jflyfox | 1 Jfinal Cms | 2026-06-17 | N/A | 9.8 CRITICAL |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. | |||||
| CVE-2022-37202 | 1 Jflyfox | 1 Jfinal Cms | 2026-06-17 | N/A | 8.8 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list | |||||
| CVE-2022-37201 | 1 Jflyfox | 1 Jfinal Cms | 2026-06-17 | N/A | 8.8 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection. | |||||
| CVE-2022-37199 | 1 Jflyfox | 1 Jfinal Cms | 2026-06-17 | N/A | 9.8 CRITICAL |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list. | |||||
| CVE-2022-37185 | 1 Ems Project | 1 Ems | 2026-06-17 | N/A | 7.5 HIGH |
| SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the Thai Basic Education Commission, which can lead to data leakage. | |||||
| CVE-2022-37178 | 1 72crm | 1 Wukong Crm | 2026-06-17 | N/A | 8.8 HIGH |
| An issue was discovered in 72crm 9.0. There is a SQL Injection vulnerability in View the task calendar. | |||||
| CVE-2022-37152 | 1 Online Diagnostic Lab Management System Project | 1 Online Diagnostic Lab Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=save_client" | |||||
| CVE-2022-37138 | 1 Razormist | 1 Loan Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator after injecting username form. | |||||
| CVE-2022-37113 | 1 Bluecms Project | 1 Bluecms | 2026-06-17 | N/A | 9.8 CRITICAL |
| Bluecms 1.6 has SQL injection in line 132 of admin/area.php | |||||
| CVE-2022-37112 | 1 Bluecms Project | 1 Bluecms | 2026-06-17 | N/A | 9.8 CRITICAL |
| BlueCMS 1.6 has SQL injection in line 55 of admin/model.php | |||||