CWE-89 · SQL Injection (page 29)
Page 29 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-67921 | High | 8.5 | 2026-01-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VanKarWai Lobo lobo allows Blind SQL Injection.This issue… |
CVE-2025-23993 | Critical | 9.3 | 2026-01-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RiceTheme Felan Framework felan-framework allows SQL Inje… |
CVE-2025-22728 | High | 8.5 | 2026-01-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Workreap (theme's plugin) workreap allows SQL… |
CVE-2025-22713 | High | 8.5 | 2026-01-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vanquish WooCommerce Orders & Customers Exporter woocomme… |
CVE-2026-0701 | Medium | 4.7 | 2026-01-08 | A vulnerability was identified in code-projects Intern Membership Management System 1.0. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2026-0700 | High | 7.3 | 2026-01-08 | A vulnerability was determined in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /intern/admin/check_admin… |
CVE-2026-0699 | Medium | 4.7 | 2026-01-08 | A vulnerability was found in code-projects Intern Membership Management System 1.0. This impacts an unknown function of the file /intern/admin/edit_activity.ph… |
CVE-2026-0698 | Medium | 4.7 | 2026-01-08 | A vulnerability has been found in code-projects Intern Membership Management System 1.0. This affects an unknown function of the file /intern/admin/edit_studen… |
CVE-2026-0697 | Medium | 4.7 | 2026-01-08 | A flaw has been found in code-projects Intern Membership Management System 1.0. The impacted element is an unknown function of the file /intern/admin/edit_admi… |
CVE-2026-21875 | Critical | 9.8 | 2026-01-08 | ClipBucket v5 is an open source video sharing platform. Versions 5.5.2-#187 and below allow an attacker to perform Blind SQL Injection through the add comment… |
CVE-2023-7333 | Medium | 5.3 | 2026-01-07 | A weakness has been identified in bluelabsio records-mover up to 1.5.4. The affected element is an unknown function of the component Table Object Handler. This… |
CVE-2026-21856 | High | 7.2 | 2026-01-07 | The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to commit 9bdb3a75a98a7047b6d70144eb1da1655d6992a8, a time based blind SQL injection vu… |
CVE-2025-32303 | Critical | 9.3 | 2026-01-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla WPCHURCH allows Blind SQL Injection.This issue a… |
CVE-2025-69351 | High | 8.5 | 2026-01-06 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Blind SQ… |
CVE-2025-59379 | High | 7.5 | 2026-01-06 | DwyerOmega Isensix Advanced Remote Monitoring System (ARMS) 1.5.7 allows an attacker to retrieve sensitive information from the underlying SQL database via Bli… |
CVE-2025-9318 | Medium | 6.5 | 2026-01-06 | The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based SQL Injection via the ‘is_linking’ parameter in… |
CVE-2025-14153 | Medium | 6.5 | 2026-01-06 | The Page Expire Popup/Redirection for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' shortcode attribute in all versions… |
CVE-2025-13652 | Medium | 6.5 | 2026-01-06 | The CBX Bookmark & Favorite plugin for WordPress is vulnerable to generic SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 2.0.4… |
CVE-2025-13409 | Medium | 4.9 | 2026-01-06 | The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to SQL Injection via the 'params' parameter in all versions up to, and including… |
CVE-2026-0607 | High | 7.3 | 2026-01-06 | A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminViewSongs.php. Executing a manip… |
CVE-2026-0606 | High | 7.3 | 2026-01-05 | A vulnerability was detected in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /FrontEnd/Albums.php. Per… |
CVE-2026-0605 | High | 7.3 | 2026-01-05 | A security vulnerability has been detected in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionality of the file /logi… |
CVE-2025-39484 | Critical | 9.3 | 2026-01-05 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Waituk Entrada allows SQL Injection.This issue affects En… |
CVE-2026-0597 | Medium | 6.3 | 2026-01-05 | A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/edit_profile.php… |
CVE-2025-15029 | Critical | 9.8 | 2026-01-05 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring (Awie export modules) allows SQ… |
CVE-2026-0592 | High | 7.3 | 2026-01-05 | A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This affects an unknown function of the file /handgunner-administra… |
CVE-2026-0591 | Medium | 6.3 | 2026-01-05 | A vulnerability was identified in code-projects Online Product Reservation System 1.0. The impacted element is an unknown function of the file /app/checkout/up… |
CVE-2026-0590 | Medium | 6.3 | 2026-01-05 | A vulnerability was determined in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file /app/checkout/de… |
CVE-2025-68865 | Critical | 9.3 | 2026-01-05 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infility Infility Global infility-global allows SQL Injec… |
CVE-2025-31044 | High | 8.5 | 2026-01-05 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue… |
CVE-2025-30633 | Critical | 9.3 | 2026-01-05 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Amazon Native Shopping Recommendations allows SQL… |
CVE-2026-0585 | High | 7.3 | 2026-01-05 | A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the file /order_view.php… |
CVE-2026-0584 | Medium | 6.3 | 2026-01-05 | A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown processing of the file app/products/left… |
CVE-2026-0583 | High | 7.3 | 2026-01-05 | A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects unknown code of the file app/user/login… |
CVE-2026-0582 | Medium | 6.3 | 2026-01-05 | A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit_activity_query.php. The mani… |
CVE-2025-15239 | Medium | 6.5 | 2026-01-05 | QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary… |
CVE-2025-15238 | Medium | 6.5 | 2026-01-05 | QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary… |
CVE-2025-15450 | Medium | 6.3 | 2026-01-05 | A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected by this vulnerability is the function findOrderH… |
CVE-2026-0579 | High | 7.3 | 2026-01-04 | A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an unknown part of the file /handgunner-administrator/edit.php o… |
CVE-2026-0578 | High | 7.3 | 2026-01-04 | A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality of the file /handgu… |
CVE-2025-15443 | Medium | 4.7 | 2026-01-04 | A vulnerability was identified in CRMEB up to 5.6.1. This issue affects some unknown processing of the file /adminapi/product/product_export. Such manipulation… |
CVE-2025-15442 | Medium | 4.7 | 2026-01-04 | A vulnerability was determined in CRMEB up to 5.6.1. This vulnerability affects unknown code of the file /adminapi/export/product_list. This manipulation of th… |
CVE-2026-0576 | High | 7.3 | 2026-01-04 | A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod… |
CVE-2026-0575 | High | 7.3 | 2026-01-04 | A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. This impacts an unknown function of the file /handgunner-adm… |
CVE-2026-0570 | High | 7.3 | 2026-01-02 | A vulnerability was found in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Frontend/Feedback.php. Performing a manipulatio… |
CVE-2026-0569 | High | 7.3 | 2026-01-02 | A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown function of the file /Frontend/AlbumByCategory.php. Such manipul… |
CVE-2026-0568 | High | 7.3 | 2026-01-02 | A flaw has been found in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Frontend/ViewSongs.php. This manipulatio… |
CVE-2026-0567 | High | 7.3 | 2026-01-02 | A vulnerability was detected in code-projects Content Management System 1.0. The affected element is an unknown function of the file /pages.php. The manipulati… |
CVE-2025-15439 | Medium | 6.3 | 2026-01-02 | A vulnerability was identified in Daptin 0.10.3. Affected by this vulnerability is the function goqu.L of the file server/resource/resource_aggregate.go of the… |
CVE-2025-59389 | Critical | 9.8 | 2026-01-02 | An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorize… |
CVE-2025-59387 | | 2026-01-02 | An SQL injection vulnerability has been reported to affect MARS (Multi-Application Recovery Service). The remote attackers can then exploit the vulnerability t… | |
CVE-2025-65125 | Critical | 9.8 | 2026-01-02 | SQL injection in gosaliajainam/online-movie-booking 5.5 in movie_details.php allows attackers to gain sensitive information. |
CVE-2026-0565 | High | 7.3 | 2026-01-02 | A weakness has been identified in code-projects Content Management System 1.0. This issue affects some unknown processing of the file /admin/delete.php. Execut… |
CVE-2026-0546 | High | 7.3 | 2026-01-02 | A vulnerability was determined in code-projects Content Management System 1.0. This impacts an unknown function of the file search.php. This manipulation of th… |
CVE-2025-15436 | High | 7.3 | 2026-01-02 | A vulnerability has been found in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /worksheet/work_edit.jsp. Such manipulation… |
CVE-2025-15435 | High | 7.3 | 2026-01-02 | A flaw has been found in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_update.jsp. This manipulation… |
CVE-2025-15434 | High | 7.3 | 2026-01-02 | A vulnerability was detected in Yonyou KSOA 9.0. Affected is an unknown function of the file /kp/PrintZPYG.jsp. The manipulation of the argument zpjhid results… |
CVE-2025-15425 | High | 7.3 | 2026-01-02 | A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_user.jsp of the component HTTP GET Pa… |
CVE-2025-15424 | High | 7.3 | 2026-01-02 | A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /worksheet/agent_worksdel.jsp of the component HTTP GET P… |
CVE-2025-15421 | High | 7.3 | 2026-01-02 | A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/agent_worksadd.jsp of the component HTTP GET Pa… |
CVE-2025-15420 | High | 7.3 | 2026-01-02 | A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agent_work_report.jsp. The manipulation of t… |
CVE-2025-55065 | High | 7.5 | 2026-01-01 | CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CVE-2025-15410 | High | 7.3 | 2026-01-01 | A vulnerability was identified in code-projects Online Guitar Store 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manip… |
CVE-2025-15409 | High | 7.3 | 2026-01-01 | A vulnerability was determined in code-projects Online Guitar Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Delete_p… |
CVE-2025-15408 | High | 7.3 | 2026-01-01 | A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/Create_product.php. Performing a manipul… |
CVE-2025-15407 | High | 7.3 | 2026-01-01 | A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Create_category.php. Such manipula… |
CVE-2026-0544 | High | 7.3 | 2026-01-01 | A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the file /student/index.php. The manipulation… |
CVE-2023-7331 | Medium | 4.7 | 2025-12-31 | A vulnerability was detected in PKrystian Full-Stack-Bank up to bf73a0179e3ff07c0d7dc35297cea0be0e5b1317. This vulnerability affects unknown code of the compon… |
CVE-2025-30628 | High | 8.5 | 2025-12-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Amazon Affiliates Addon for WPBakery Page Builder… |
CVE-2025-28949 | High | 8.5 | 2025-12-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codedraft Mediabay - WordPress Media Library Folders allo… |
CVE-2025-15392 | Medium | 6.3 | 2025-12-31 | A weakness has been identified in Kohana KodiCMS up to 13.82.135. This affects the function like of the file cms/modules/pages/classes/kodicms/model/page.php o… |
CVE-2023-54163 | High | 7.5 | 2025-12-30 | NLB mKlik Macedonia 3.3.12 contains a SQL injection vulnerability in international transfer parameters that allows attackers to manipulate database queries. At… |
CVE-2022-50694 | Critical | 9.8 | 2025-12-30 | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an SQL injection vulnerability in the 'username' POST parameter of index.php that allows attackers to manipulate d… |
CVE-2025-15354 | High | 7.3 | 2025-12-30 | A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/add_admin.php. Executing ma… |
CVE-2025-15353 | High | 7.3 | 2025-12-30 | A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is the function edit_admin_query of the file /admin/edit_admin_query.php… |
CVE-2025-15263 | High | 7.3 | 2025-12-30 | A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login. Exe… |
CVE-2025-59129 | High | 7.6 | 2025-12-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appointify Appointify appointify allows Blind SQL Injecti… |
CVE-2025-68990 | High | 8.5 | 2025-12-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xenioushk BWL Pro Voting Manager bwl-pro-voting-manager a… |
CVE-2025-15243 | High | 7.3 | 2025-12-30 | A flaw has been found in code-projects Simple Stock System 1.0. This affects an unknown function of the file /market/login.php. Executing a manipulation of the… |
CVE-2025-15212 | Medium | 6.3 | 2025-12-30 | A vulnerability was detected in code-projects Refugee Food Management System 1.0. This issue affects some unknown processing of the file /home/regfood.php. Per… |
CVE-2025-15211 | Medium | 6.3 | 2025-12-30 | A flaw has been found in code-projects Refugee Food Management System 1.0. Impacted is an unknown function of the file /home/refugee.php. Executing manipulatio… |
CVE-2025-15210 | Medium | 6.3 | 2025-12-30 | A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This vulnerability affects unknown code of the file /home/editr… |
CVE-2025-15209 | Medium | 6.3 | 2025-12-29 | A weakness has been identified in code-projects Refugee Food Management System 1.0. This affects an unknown part of the file /home/editfood.php. This manipulat… |
CVE-2025-15208 | High | 7.3 | 2025-12-29 | A security flaw has been discovered in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home… |
CVE-2025-15207 | High | 7.3 | 2025-12-29 | A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/view_products.php. The manipulat… |
CVE-2025-15206 | High | 7.3 | 2025-12-29 | A flaw has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /admin/add_area.php. Executing a manipulation o… |
CVE-2025-15205 | Medium | 6.3 | 2025-12-29 | A vulnerability was identified in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /dow… |
CVE-2025-67255 | High | 8.8 | 2025-12-29 | In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability. |
CVE-2025-15198 | High | 7.3 | 2025-12-29 | A weakness has been identified in code-projects College Notes Uploading System 1.0. This issue affects some unknown processing of the file /login.php. Executin… |
CVE-2025-15196 | High | 7.3 | 2025-12-29 | A vulnerability was identified in code-projects Assessment Management 1.0. This affects an unknown part of the file login.php. Such manipulation of the argumen… |
CVE-2025-15195 | High | 7.3 | 2025-12-29 | A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.p… |
CVE-2025-15186 | High | 7.3 | 2025-12-29 | A vulnerability has been found in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home/addu… |
CVE-2025-15185 | High | 7.3 | 2025-12-29 | A flaw has been found in code-projects Refugee Food Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /home/refugee… |
CVE-2025-15184 | High | 7.3 | 2025-12-29 | A vulnerability was detected in code-projects Refugee Food Management System 1.0. Affected is an unknown function of the file /home/refugeesreport2.php. The ma… |
CVE-2025-15183 | High | 7.3 | 2025-12-29 | A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This impacts an unknown function of the file /home/viewtakenfd… |
CVE-2025-15182 | High | 7.3 | 2025-12-29 | A weakness has been identified in code-projects Refugee Food Management System 1.0. This affects an unknown function of the file /home/served.php. Executing ma… |
CVE-2025-15181 | High | 7.3 | 2025-12-29 | A security flaw has been discovered in code-projects Refugee Food Management System 1.0. The impacted element is an unknown function of the file /home/pagenate… |
CVE-2025-15169 | Medium | 4.7 | 2025-12-29 | A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executin… |
CVE-2025-15168 | High | 7.3 | 2025-12-29 | A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation o… |
CVE-2025-15167 | High | 7.3 | 2025-12-29 | A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /detailtransac.php. This manipulat… |