CWE-89 · SQL Injection (page 37)
Page 37 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-11555 | High | 7.3 | 2025-10-09 | A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/calendar_of_events.php. The ma… |
CVE-2025-60316 | Critical | 9.4 | 2025-10-09 | SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/view_customer.php via the ID parameter. |
CVE-2025-11553 | Medium | 6.3 | 2025-10-09 | A weakness has been identified in code-projects Courier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-cour… |
CVE-2025-11552 | Medium | 6.3 | 2025-10-09 | A vulnerability was identified in code-projects Online Complaint Site 1.0. This impacts an unknown function of the file /admin/category.php. Such manipulation… |
CVE-2025-60267 | Medium | 6.5 | 2025-10-09 | In xckk v9.6, there is a SQL injection vulnerability in which the cond parameter in notice/list is not securely filtered, resulting in a SQL injection vulnerab… |
CVE-2025-11551 | Medium | 6.3 | 2025-10-09 | A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file src/students/Database.java. This manip… |
CVE-2025-60266 | Medium | 6.5 | 2025-10-09 | In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vuln… |
CVE-2025-60265 | Medium | 6.5 | 2025-10-09 | In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securely filtered, resulting in a SQL injection vulnera… |
CVE-2025-62228 | High | 8.8 | 2025-10-09 | Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even thro… |
CVE-2025-10862 | High | 7.5 | 2025-10-09 | The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to SQL Injection in a… |
CVE-2025-11530 | Medium | 6.3 | 2025-10-09 | A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation… |
CVE-2025-10586 | Critical | 9.8 | 2025-10-09 | The Community Events plugin for WordPress is vulnerable to SQL Injection via the ‘event_venue’ parameter in all versions up to, and including, 1.5.1 due to ins… |
CVE-2025-11516 | Medium | 6.3 | 2025-10-09 | A weakness has been identified in code-projects Online Complaint Site 1.0. Impacted is an unknown function of the file /cms/users/complaint-details.php. Execut… |
CVE-2025-11515 | Medium | 6.3 | 2025-10-09 | A security flaw has been discovered in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/users/register-comp… |
CVE-2025-11514 | Medium | 6.3 | 2025-10-09 | A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of the file /cms/users/index.php. Such manip… |
CVE-2025-11513 | High | 7.3 | 2025-10-09 | A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplier_update.php. This manipulation… |
CVE-2025-11511 | Medium | 6.3 | 2025-10-08 | A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplier_add.php. Executing manipulation of t… |
CVE-2025-11509 | Medium | 6.3 | 2025-10-08 | A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/product_add.php. Performing manipulat… |
CVE-2025-11507 | High | 7.3 | 2025-10-08 | A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/search-invoic… |
CVE-2025-11506 | High | 7.3 | 2025-10-08 | A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/search-a… |
CVE-2025-11505 | High | 7.3 | 2025-10-08 | A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of the file /admin/new-appointment.php. The… |
CVE-2025-60311 | High | 8.8 | 2025-10-08 | ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in the profile/edit.php page |
CVE-2025-11503 | High | 7.3 | 2025-10-08 | A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown processing of the file /admin/manage-service… |
CVE-2025-11487 | Medium | 6.3 | 2025-10-08 | A security flaw has been discovered in SourceCodester Farm Management System 1.0. Affected by this issue is some unknown functionality of the file /uploadProdu… |
CVE-2025-11486 | Medium | 6.3 | 2025-10-08 | A vulnerability was identified in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /buyNow.php… |
CVE-2025-11481 | Medium | 6.3 | 2025-10-08 | A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-System up to dc9e0393d826fbc85fad9755b5bc12cba1919df2. The impacted element is an u… |
CVE-2025-11480 | High | 7.3 | 2025-10-08 | A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performi… |
CVE-2025-11479 | High | 7.3 | 2025-10-08 | A security vulnerability has been detected in SourceCodester Wedding Reservation Management System 1.0. Impacted is the function insertReservation of the file… |
CVE-2025-11478 | Medium | 6.3 | 2025-10-08 | A weakness has been identified in SourceCodester Farm Management System 1.0. This issue affects some unknown processing of the file /myCart.php. This manipulat… |
CVE-2025-11477 | High | 7.3 | 2025-10-08 | A security flaw has been discovered in SourceCodester Wedding Reservation Management System 1.0. This vulnerability affects unknown code of the file /global.ph… |
CVE-2025-11476 | High | 7.3 | 2025-10-08 | A vulnerability was identified in SourceCodester Simple E-Commerce Bookstore 1.0. This affects an unknown part of the file /index.php. The manipulation of the… |
CVE-2025-11475 | High | 7.3 | 2025-10-08 | A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /view_… |
CVE-2025-11474 | Medium | 6.3 | 2025-10-08 | A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit… |
CVE-2025-11473 | High | 7.3 | 2025-10-08 | A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected is an unknown function of the file /edit_curr.php. Such manipu… |
CVE-2025-11472 | High | 7.3 | 2025-10-08 | A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /edit_room.php. This manipulation o… |
CVE-2025-11471 | High | 7.3 | 2025-10-08 | A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /edit_customer.php. The mani… |
CVE-2025-10649 | Medium | 6.5 | 2025-10-08 | The Welcart e-Commerce plugin for WordPress is vulnerable to SQL Injection via the cookie in all versions up to, and including, 2.11.21 due to insufficient esc… |
CVE-2025-10351 | | 2025-10-08 | SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, creat… | |
CVE-2025-11469 | Medium | 6.3 | 2025-10-08 | A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /pages/save_cus… |
CVE-2025-11434 | High | 7.3 | 2025-10-08 | A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a ma… |
CVE-2025-11432 | High | 7.3 | 2025-10-08 | A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /reset.php. Such manipulation of the a… |
CVE-2025-11204 | High | 7.2 | 2025-10-08 | The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to SQL Injection in all versio… |
CVE-2025-11431 | Medium | 6.3 | 2025-10-08 | A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. The impacted element is an unknown function of the file /transaction.ph… |
CVE-2025-11430 | High | 7.3 | 2025-10-08 | A vulnerability was found in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /cart.php. The manipulatio… |
CVE-2025-10587 | Critical | 9.8 | 2025-10-08 | The Community Events plugin for WordPress is vulnerable to SQL Injection via the event_category parameter in all versions up to, and including, 1.5.1 due to in… |
CVE-2025-11424 | High | 7.3 | 2025-10-08 | A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing mani… |
CVE-2025-11422 | High | 7.3 | 2025-10-08 | A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login… |
CVE-2025-11420 | High | 7.3 | 2025-10-08 | A vulnerability was detected in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/edit_order_details.php. The manipulati… |
CVE-2025-11416 | High | 7.3 | 2025-10-07 | A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/invoices.php. Performin… |
CVE-2025-11415 | High | 7.3 | 2025-10-07 | A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/cust… |
CVE-2025-11410 | Medium | 6.3 | 2025-10-07 | A flaw has been found in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/voters_add.php. Executing… |
CVE-2025-11409 | Medium | 6.3 | 2025-10-07 | A vulnerability was detected in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /index.php. Per… |
CVE-2025-11405 | Medium | 6.3 | 2025-10-07 | A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file /del_tax.php. The m… |
CVE-2025-11404 | Medium | 6.3 | 2025-10-07 | A vulnerability was determined in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown part of the file /pages/save_tax.php. Executing… |
CVE-2025-11403 | Medium | 6.3 | 2025-10-07 | A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this issue is some unknown functionality of the file /del_bookin… |
CVE-2025-11402 | Medium | 6.3 | 2025-10-07 | A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2025-52021 | Critical | 9.8 | 2025-10-07 | A SQL Injection vulnerability exists in the edit_product.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The product_id GET parameter is unsafe… |
CVE-2025-11401 | Medium | 6.3 | 2025-10-07 | A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected is an unknown function of the file /pages/save_curr.php. This manipulat… |
CVE-2025-11400 | Medium | 6.3 | 2025-10-07 | A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /del_room.php. The manipulat… |
CVE-2025-11399 | Medium | 6.3 | 2025-10-07 | A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /pages/save_ro… |
CVE-2025-11397 | High | 7.3 | 2025-10-07 | A security flaw has been discovered in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /login.php… |
CVE-2025-40888 | Medium | 5.3 | 2025-10-07 | A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter. An authenticated user with limited priv… |
CVE-2025-40887 | Medium | 5.3 | 2025-10-07 | A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited pr… |
CVE-2025-40886 | High | 7.5 | 2025-10-07 | A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited pr… |
CVE-2025-40885 | Medium | 5.3 | 2025-10-07 | A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with li… |
CVE-2025-11396 | High | 7.3 | 2025-10-07 | A vulnerability was identified in code-projects Simple Food Ordering System 1.0. Impacted is an unknown function of the file /product.php. Such manipulation of… |
CVE-2025-0603 | Critical | 9.8 | 2025-10-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Callvision Healthcare Callvision Emergency Code allows SQ… |
CVE-2025-11359 | Medium | 6.3 | 2025-10-07 | A security vulnerability has been detected in code-projects Simple Banking System 1.0. The affected element is an unknown function of the file /transfermoney.p… |
CVE-2025-11358 | Medium | 6.3 | 2025-10-07 | A weakness has been identified in code-projects Simple Banking System 1.0. Impacted is an unknown function of the file /removeuser.php. Executing manipulation… |
CVE-2025-11357 | Medium | 6.3 | 2025-10-07 | A security flaw has been discovered in code-projects Simple Banking System 1.0. This issue affects some unknown processing of the file /createuser.php. Perform… |
CVE-2025-11350 | High | 7.3 | 2025-10-07 | A security flaw has been discovered in Campcodes Online Apartment Visitor Management System 1.0. The affected element is an unknown function of the file /bwdat… |
CVE-2025-11349 | High | 7.3 | 2025-10-07 | A vulnerability was identified in Campcodes Online Apartment Visitor Management System 1.0. Impacted is an unknown function of the file /search-visitor.php. Th… |
CVE-2025-11348 | High | 7.3 | 2025-10-07 | A vulnerability was determined in Campcodes Online Apartment Visitor Management System 1.0. This issue affects some unknown processing of the file /index.php… |
CVE-2025-57515 | Critical | 9.8 | 2025-10-06 | A SQL injection vulnerability has been identified in Uniclare Student Portal v2. This flaw allows remote attackers to inject arbitrary SQL commands via vulnera… |
CVE-2025-11343 | High | 7.3 | 2025-10-06 | A security vulnerability has been detected in code-projects Student Crud Operation 3.3. Affected is an unknown function of the file delete.php. The manipulatio… |
CVE-2025-11342 | Medium | 4.7 | 2025-10-06 | A weakness has been identified in code-projects Online Course Registration 1.0. This impacts an unknown function of the file /admin/edit-course.php. Executing… |
CVE-2025-52472 | | 2025-10-06 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 4.3-milestone-1 and prior to versi… | |
CVE-2025-11334 | High | 7.3 | 2025-10-06 | A security flaw has been discovered in Campcodes Online Apartment Visitor Management System 1.0. Affected is an unknown function of the file /visitor-detail.ph… |
CVE-2025-11330 | Medium | 6.3 | 2025-10-06 | A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/sales-reports… |
CVE-2025-11329 | High | 7.3 | 2025-10-06 | A flaw has been found in code-projects Online Course Registration 1.0. Impacted is an unknown function of the file /admin/manage-students.php. This manipulatio… |
CVE-2025-11319 | Medium | 6.3 | 2025-10-06 | A weakness has been identified in nahiduddinahammed Hospital-Management-System-Website up to e6562429e14b2f88bd2139cae16e87b965024097. This issue affects some… |
CVE-2025-11317 | High | 7.3 | 2025-10-06 | A vulnerability was identified in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This affects the function findRolePage of the file findSin… |
CVE-2025-11316 | High | 7.3 | 2025-10-06 | A vulnerability was determined in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. Affected by this issue is the function findCategoryPage of… |
CVE-2025-11315 | High | 7.3 | 2025-10-06 | A vulnerability was found in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. Affected by this vulnerability is the function findUserPage of… |
CVE-2025-11314 | High | 7.3 | 2025-10-06 | A vulnerability has been found in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. Affected is the function findRolePage of the file findSing… |
CVE-2025-11313 | High | 7.3 | 2025-10-06 | A flaw has been found in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This impacts the function findRolePage of the file findRolePage.do… |
CVE-2025-11312 | High | 7.3 | 2025-10-06 | A vulnerability was detected in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This affects the function findModulePage of the file findMod… |
CVE-2025-11311 | High | 7.3 | 2025-10-06 | A security vulnerability has been detected in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. The impacted element is the function findTenan… |
CVE-2025-11310 | High | 7.3 | 2025-10-06 | A weakness has been identified in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. The affected element is the function findFileServerPage of… |
CVE-2025-11309 | High | 7.3 | 2025-10-05 | A security flaw has been discovered in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. Impacted is the function doFilter of the file findDep… |
CVE-2025-11288 | Medium | 6.3 | 2025-10-05 | A security flaw has been discovered in CRMEB up to 5.6. This issue affects some unknown processing of the file /adminapi/product/product of the component GET P… |
CVE-2025-10692 | | 2025-10-03 | The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter bindi… | |
CVE-2025-54153 | High | 8.8 | 2025-10-03 | An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to… |
CVE-2025-53595 | High | 8.8 | 2025-10-03 | An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to… |
CVE-2024-56804 | High | 8.8 | 2025-10-03 | An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to… |
CVE-2025-57423 | Medium | 6.5 | 2025-10-03 | A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate… |
CVE-2025-9200 | High | 7.5 | 2025-10-03 | The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nh_ynaa_comments()… |
CVE-2025-9199 | Medium | 6.5 | 2025-10-03 | The Woo superb slideshow transition gallery with random effect plugin for WordPress is vulnerable to SQL Injection via the 'woo-superb-slideshow' shortcode in… |
CVE-2025-9198 | Medium | 6.5 | 2025-10-03 | The Wp cycle text announcement plugin for WordPress is vulnerable to SQL Injection via the 'cycle-text' shortcode in all versions up to, and including, 8.1 due… |
CVE-2025-40636 | | 2025-10-03 | SQL injection vulnerability in Joomla module mod_vvisit_counter v2.0.4j3. This vulnerability allows an attacker to retrieve database content via the ‘cip_vvisi… |