CWE-89 · SQL Injection (page 15)
Page 15 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-14734 | High | 7.3 | 2026-07-05 | A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_product.php. This manipulation… |
CVE-2026-14733 | High | 7.3 | 2026-07-05 | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /edit_coursea.php… |
CVE-2026-14732 | High | 7.3 | 2026-07-05 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /edit_e… |
CVE-2026-14731 | Medium | 6.3 | 2026-07-05 | A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /patientreport.php. Executing a manipul… |
CVE-2026-14730 | Medium | 6.3 | 2026-07-05 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /patientpr… |
CVE-2026-14717 | Medium | 6.3 | 2026-07-05 | A vulnerability was detected in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /patientlogin.php. Perform… |
CVE-2026-14713 | High | 7.3 | 2026-07-05 | A security flaw has been discovered in SourceCodester Pizzafy E-Commerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action… |
CVE-2026-14706 | Medium | 6.3 | 2026-07-05 | A vulnerability was identified in code-projects Online Examination 1.0. This affects an unknown part of the file /update.php?q=addquiz of the component Quiz Cr… |
CVE-2026-14705 | High | 7.3 | 2026-07-05 | A vulnerability was determined in code-projects Online Examination 1.0. Affected by this issue is some unknown functionality of the file head.php. Executing a… |
CVE-2026-14703 | Medium | 6.3 | 2026-07-05 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /patientorder.php. Such manipulation… |
CVE-2026-14701 | Medium | 6.3 | 2026-07-05 | A vulnerability was detected in code-projects Internship Management System 1.0. This affects an unknown function of the file employer/details/change_password.p… |
CVE-2026-14700 | High | 7.3 | 2026-07-05 | A security vulnerability has been detected in code-projects Internship Management System 1.0. The impacted element is an unknown function of the file employer/… |
CVE-2026-14695 | High | 7.3 | 2026-07-05 | A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_client of the file classes/Users… |
CVE-2026-14694 | Medium | 6.3 | 2026-07-05 | A vulnerability has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this issue is the function cancel_order of the… |
CVE-2026-14692 | Medium | 6.3 | 2026-07-05 | A vulnerability was detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26. Affected is the function save_shop_type of the file cl… |
CVE-2026-14689 | Medium | 6.3 | 2026-07-05 | A security flaw has been discovered in CodeAstro Apartment Visitor Management System 1.0. The impacted element is an unknown function of the file /apartment-vi… |
CVE-2026-14688 | High | 7.3 | 2026-07-05 | A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. The affected element is an unknown function of the file /admin/login.php. Th… |
CVE-2026-14660 | High | 7.3 | 2026-07-04 | A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file login.php. Performing a manipulation… |
CVE-2026-14659 | Medium | 6.3 | 2026-07-04 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /patientappointment.php. Such manipu… |
CVE-2026-14658 | Medium | 6.3 | 2026-07-04 | A vulnerability was detected in code-projects Assessment Management 1.0. This vulnerability affects unknown code of the file /lecturer/marking-scheme.php. The… |
CVE-2026-14657 | Medium | 6.3 | 2026-07-04 | A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file /lecturer/marking-scheme.php of the co… |
CVE-2026-14654 | High | 7.3 | 2026-07-04 | A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdelet… |
CVE-2026-14653 | High | 7.3 | 2026-07-04 | A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdelet… |
CVE-2026-14652 | High | 7.3 | 2026-07-04 | A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the comp… |
CVE-2026-14649 | High | 7.3 | 2026-07-04 | A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the function test_input of the file /saveVote.php. Performing a manipulatio… |
CVE-2026-14648 | High | 7.3 | 2026-07-04 | A security vulnerability has been detected in code-projects Online Voting System up to 0.x/1.0. This issue affects the function test_input of the file /authent… |
CVE-2026-14642 | High | 7.3 | 2026-07-04 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /edit_… |
CVE-2026-14641 | High | 7.3 | 2026-07-04 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2026-14640 | High | 7.3 | 2026-07-04 | A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /index.php of the component Login… |
CVE-2026-14639 | Medium | 6.3 | 2026-07-04 | A vulnerability has been found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /ecommerce-website-php/customer/my_account.php?… |
CVE-2026-14638 | Medium | 6.3 | 2026-07-04 | A flaw has been found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /patient.php. This manipulation of the argum… |
CVE-2026-14619 | Medium | 6.3 | 2026-07-04 | A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /medicine.php. This mani… |
CVE-2026-4321 | Critical | 9.8 | 2026-07-03 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Raera - Ankara Web Design and Digital Advertising Agency… |
CVE-2026-12920 | Medium | 4.9 | 2026-07-03 | The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to… |
CVE-2026-9272 | High | 8.1 | 2026-07-02 | In Progress Flowmon ADS versions prior to 12.5.6 and 13.0.5, a vulnerability exists whereby an adversary who is authenticated as a low-privileged user in the A… |
CVE-2026-56841 | High | 8.8 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application t… |
CVE-2026-54404 | High | 8.8 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to esca… |
CVE-2026-50747 | Critical | 9.9 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Appli… |
CVE-2026-57765 | High | 8.5 | 2026-07-02 | Contributor SQL Injection in WP EasyCart <= 5.9.0 versions. |
CVE-2026-57756 | High | 8.5 | 2026-07-02 | Contributor SQL Injection in nicen-localize-image <= 1.4.9 versions. |
CVE-2026-57752 | High | 8.5 | 2026-07-02 | Contributor SQL Injection in iNET Webkit 1.2.4 versions. |
CVE-2026-57687 | High | 8.5 | 2026-07-02 | Contributor SQL Injection in Custom Field Template <= 2.7.8 versions. |
CVE-2026-57683 | Critical | 9.3 | 2026-07-02 | Unauthenticated SQL Injection in WP Fast Total Search <= 1.80.280 versions. |
CVE-2026-57679 | Critical | 9.3 | 2026-07-02 | Unauthenticated SQL Injection in GeekyBot <= 1.2.5 versions. |
CVE-2025-69094 | High | 8.5 | 2026-07-02 | Subscriber SQL Injection in Unicamp <= 2.2.2 versions. |
CVE-2026-8441 | High | 7.5 | 2026-07-02 | The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'notinstring' parameter of the wprp_load_more_revs AJAX action in versions… |
CVE-2026-14029 | Medium | 6.5 | 2026-07-02 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via the 'select' parameter in all versi… |
CVE-2026-13357 | Medium | 4.9 | 2026-07-02 | The Houzez Property Feed plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.5.46 due to in… |
CVE-2026-52186 | Critical | 9.8 | 2026-07-01 | SQL Injection vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to execute arbitrary code via the gohead/sub_463bbc component |
CVE-2026-14363 | Critical | 9.8 | 2026-07-01 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allo… |
CVE-2026-58521 | Critical | 9.8 | 2026-07-01 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allo… |
CVE-2026-51946 | Medium | 6.5 | 2026-07-01 | SQL Injection vulnerability in GoAdminGroup GoAdmin (last release v1.2.26) allows a remote attacker to execute arbitrary code and obtain sensitive information… |
CVE-2026-34105 | High | 8.8 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in translate_text.php (line 15): SELECT id, filename, extension, ty… |
CVE-2026-34104 | High | 8.8 | 2026-07-01 | Guardian language-system passes the name GET parameter directly into an unsanitized SQL query in designer.php (line 124): SELECT * FROM complex WHERE name='\"… |
CVE-2026-34103 | High | 8.8 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in subtitles.php (line 16): SELECT id, filename, extension, type FR… |
CVE-2026-34102 | High | 8.8 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in job_info_get.php (line 16): SELECT * FROM jobs where input1 = '\… |
CVE-2026-34101 | High | 8.8 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in text_file.php (line 17): SELECT id, filename, extension, type, d… |
CVE-2026-34100 | High | 8.8 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media.php (line 17): SELECT id, filename, extension, type, durat… |
CVE-2026-34099 | Critical | 9.8 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in job_info.php (line 16): SELECT * FROM jobs where id = '\".$_GET[… |
CVE-2026-57517 | Critical | 9.8 | 2026-07-01 | Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL queries… |
CVE-2026-13454 | Medium | 6.5 | 2026-07-01 | The MotoPress Appointment Booking plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 2.4.5… |
CVE-2026-11823 | High | 7.5 | 2026-07-01 | The BookingPress Appointment Booking Pro plugin for WordPress is vulnerable to SQL Injection via the 'store_service_date' parameter of the bpa_assign_staffmemb… |
CVE-2026-12110 | Medium | 6.5 | 2026-07-01 | The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to generic SQL Injection via the 'task_search'… |
CVE-2026-12090 | Medium | 6.5 | 2026-07-01 | The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to generic SQL Injection via the 'wppm_proj_fi… |
CVE-2026-55721 | Critical | 9.3 | 2026-06-30 | Storage Concentrator (SC & SCVM) is vulnerable to SQL injection through cookie values processed by the login.pl and debug.pl scripts. The cookie value is incor… |
CVE-2026-3602 | Medium | 4.7 | 2026-06-30 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable… |
CVE-2026-58376 | High | 7.6 | 2026-06-30 | Dolibarr through 23.0.3, fixed in commit 14db36e, contains a sql injection vulnerability that allows authenticated API users to exfiltrate arbitrary database c… |
CVE-2025-53648 | Medium | 5.4 | 2026-06-30 | SQL misconfiguration in the Gravitino UI, in versions 1.0.0 and below, can allow a malicious user to read or truncate files. Users are recommended to upgrade t… |
CVE-2026-8402 | Critical | 9.8 | 2026-06-30 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Eksagate Electronic Engineering and Computer Industry Tra… |
CVE-2026-53690 | | 2026-06-30 | An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint. The application… | |
CVE-2026-13766 | Critical | 9.8 | 2026-06-30 | DBIx::QuickORM versions before 0.000026 for Perl allow SQL injection via unquoted SQL identifiers. The default SQL builder, a SQL::Abstract subclass, sets bin… |
CVE-2026-9711 | Critical | 9.8 | 2026-06-30 | The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress (full) is vulnerable to SQL Injection via the WordPress 'search' parameter in versio… |
CVE-2026-12076 | | 2026-06-30 | Raytha CMS is vulnerable to SQL Injection within the OData filter parsing pipeline. The vulnerability allows a remote, unauthenticated attacker to execute ar… | |
CVE-2026-57955 | High | 8.5 | 2026-06-29 | SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary ClickHouse queries by injecting URL-enco… |
CVE-2026-13752 | Medium | 6.0 | 2026-06-29 | Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker could exploit this by supplying cra… |
CVE-2026-13746 | Low | 3.6 | 2026-06-29 | Improper neutralization of local CLI parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. A user could trigger this issue by su… |
CVE-2026-13744 | High | 8.3 | 2026-06-29 | Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. By supplying crafted repositor… |
CVE-2026-13579 | Medium | 6.3 | 2026-06-29 | A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /patientchangep… |
CVE-2026-13578 | Medium | 6.3 | 2026-06-29 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pat… |
CVE-2026-13572 | Medium | 6.3 | 2026-06-29 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /insertbillingrecord.php… |
CVE-2026-40524 | High | 8.1 | 2026-06-29 | FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the get_gl_transactions() function where the filter_type parameter is concatenated dire… |
CVE-2026-40523 | High | 8.1 | 2026-06-29 | FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Audit Trail report handler that allows authenticated attackers with SA_GLANALYTIC p… |
CVE-2026-40522 | High | 7.1 | 2026-06-29 | FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Bank Statement report handler that allows authenticated attackers to extract arbitr… |
CVE-2026-13569 | Medium | 4.7 | 2026-06-29 | A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1. This issue affects some unknown processing of the file /index.php of the compone… |
CVE-2026-13566 | High | 7.3 | 2026-06-29 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /previ… |
CVE-2026-13565 | High | 7.3 | 2026-06-29 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerability is an unknown functionality of the… |
CVE-2026-13559 | High | 7.3 | 2026-06-29 | A weakness has been identified in code-projects Real State Services 1.0. Impacted is an unknown function of the file /single-list_sale.php?action=add. Executin… |
CVE-2026-13555 | High | 7.3 | 2026-06-29 | A vulnerability was found in itsourcecode Online Hotel Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/mod_users… |
CVE-2026-13552 | High | 7.3 | 2026-06-29 | A vulnerability was detected in itsourcecode Online Hotel Management System 1.0. This impacts an unknown function of the file /admin/mod_amenities/controller.p… |
CVE-2026-13551 | High | 7.3 | 2026-06-29 | A security vulnerability has been detected in itsourcecode Baptism Information Management System 1.0. This affects an unknown function of the file /editBaptism… |
CVE-2026-13550 | High | 7.3 | 2026-06-29 | A weakness has been identified in itsourcecode Baptism Information Management System 1.0. The impacted element is an unknown function of the file /delbaptism.p… |
CVE-2026-13548 | Medium | 6.3 | 2026-06-29 | A vulnerability was identified in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /doctortimings.php. The manipulation… |
CVE-2026-13542 | Medium | 6.3 | 2026-06-29 | A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /doctorprofile.php. The… |
CVE-2026-13541 | Medium | 6.3 | 2026-06-29 | A weakness has been identified in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /doctorchangepassword.php. Executin… |
CVE-2026-13535 | Medium | 6.3 | 2026-06-29 | A flaw has been found in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function GetFileInfo of the file hrsystem/application/m… |
CVE-2026-13532 | Medium | 6.3 | 2026-06-29 | A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /departme… |
CVE-2026-13531 | Medium | 6.3 | 2026-06-29 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /department.php. The manipulati… |
CVE-2026-13530 | Medium | 6.3 | 2026-06-29 | A vulnerability was identified in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /appointmentdetail.php of the compo… |
CVE-2026-13529 | Medium | 5.6 | 2026-06-29 | A vulnerability was determined in YzmCMS up to 7.5. This affects an unknown function of the file /application/install/index.php. Executing a manipulation of th… |
CVE-2026-13527 | High | 7.3 | 2026-06-29 | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /preview4.php… |