CWE-89 · SQL Injection (page 39)
Page 39 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-10835 | Medium | 6.3 | 2025-09-23 | A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/view_payorder.p… |
CVE-2025-10834 | High | 7.3 | 2025-09-23 | A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/login.php. Such manipu… |
CVE-2025-10833 | High | 7.3 | 2025-09-23 | A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown function of the file /login.php. This manipu… |
CVE-2025-10832 | High | 7.3 | 2025-09-23 | A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. The affected element is an unknown function of the file /admin/fetch_product_… |
CVE-2025-10831 | High | 7.3 | 2025-09-23 | A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_edit1.php. The mani… |
CVE-2025-10830 | High | 7.3 | 2025-09-23 | A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/inv_edit1.php. Execut… |
CVE-2025-10829 | High | 7.3 | 2025-09-23 | A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/sup_edit1.php. Pe… |
CVE-2025-10828 | Medium | 6.3 | 2025-09-23 | A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/edit.php. Su… |
CVE-2025-10826 | Medium | 6.3 | 2025-09-23 | A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-10825 | Medium | 6.3 | 2025-09-23 | A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. Affected is an unknown function of the file /admin/view-appointment.php… |
CVE-2025-10817 | High | 7.3 | 2025-09-22 | A weakness has been identified in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/admin_user.php. E… |
CVE-2025-10813 | High | 7.3 | 2025-09-22 | A vulnerability was found in code-projects Hostel Management System 1.0. Affected is an unknown function of the file /justines/admin/mod_reports/index.php. The… |
CVE-2025-10812 | High | 7.3 | 2025-09-22 | A vulnerability has been found in code-projects Hostel Management System 1.0. This impacts an unknown function of the file /justines/admin/mod_amenities/index… |
CVE-2025-59570 | High | 7.6 | 2025-09-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This i… |
CVE-2025-58686 | High | 8.5 | 2025-09-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quadlayers Perfect Brands for WooCommerce perfect-woocomm… |
CVE-2025-53468 | High | 8.5 | 2025-09-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus@hotmail.com Wp tabber widget wp-tabber-widget al… |
CVE-2025-10811 | High | 7.3 | 2025-09-22 | A flaw has been found in code-projects Hostel Management System 1.0. This affects an unknown function of the file /justines/admin/mod_comments/index.php?view=v… |
CVE-2025-10810 | High | 7.3 | 2025-09-22 | A vulnerability was detected in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/edit_user.php… |
CVE-2025-55885 | Medium | 6.3 | 2025-09-22 | SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET… |
CVE-2025-10809 | High | 7.3 | 2025-09-22 | A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. The affected element is an unknown function of the file /admin/d… |
CVE-2025-10808 | High | 7.3 | 2025-09-22 | A weakness has been identified in Campcodes Farm Management System 1.0. Impacted is an unknown function of the file /uploadProduct.php. This manipulation of th… |
CVE-2025-10807 | Medium | 6.3 | 2025-09-22 | A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/edit… |
CVE-2025-10806 | Medium | 6.3 | 2025-09-22 | A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/bwdates-repo… |
CVE-2025-10805 | Medium | 6.3 | 2025-09-22 | A vulnerability was determined in Campcodes Online Beauty Parlor Management System 1.0. This affects an unknown part of the file /admin/add-services.php. Execu… |
CVE-2025-10804 | Medium | 6.3 | 2025-09-22 | A vulnerability was found in Campcodes Online Beauty Parlor Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/add-… |
CVE-2025-10802 | High | 7.3 | 2025-09-22 | A flaw has been found in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /administrator/remove.php. This manipulation of t… |
CVE-2025-56075 | Medium | 5.4 | 2025-09-22 | A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerabi… |
CVE-2025-56074 | Critical | 9.8 | 2025-09-22 | A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulner… |
CVE-2025-10801 | High | 7.3 | 2025-09-22 | A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown function of the file /admin/edit_tax… |
CVE-2025-10800 | High | 7.3 | 2025-09-22 | A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function of the file /index.php. Executing manip… |
CVE-2025-10799 | High | 7.3 | 2025-09-22 | A security flaw has been discovered in code-projects Hostel Management System 1.0. The affected element is an unknown function of the file /justines/admin/mod_… |
CVE-2025-10798 | High | 7.3 | 2025-09-22 | A vulnerability was identified in code-projects Hostel Management System 1.0. Impacted is an unknown function of the file /justines/admin/mod_roomtype/index.ph… |
CVE-2025-10797 | High | 7.3 | 2025-09-22 | A vulnerability was determined in code-projects Hostel Management System 1.0. This issue affects some unknown processing of the file /justines/index.php. This… |
CVE-2025-10796 | High | 7.3 | 2025-09-22 | A vulnerability was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /justines/admin/login.php. The man… |
CVE-2025-10795 | High | 7.3 | 2025-09-22 | A vulnerability has been found in code-projects Online Bidding System 1.0. This affects an unknown part of the file /administrator/bidupdate.php. The manipulat… |
CVE-2025-10793 | High | 7.3 | 2025-09-22 | A vulnerability was detected in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/admin_accou… |
CVE-2025-10791 | High | 7.3 | 2025-09-22 | A weakness has been identified in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/index.php. This manipula… |
CVE-2025-10790 | Medium | 6.3 | 2025-09-22 | A security flaw has been discovered in SourceCodester Simple Forum Discussion System 1.0. This affects an unknown function of the file /ajax.php?action=save_ca… |
CVE-2025-10789 | High | 7.3 | 2025-09-22 | A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php… |
CVE-2025-10788 | High | 7.3 | 2025-09-22 | A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominvento… |
CVE-2025-10786 | High | 7.3 | 2025-09-22 | A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=delete_user. Th… |
CVE-2025-10785 | High | 7.3 | 2025-09-22 | A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown part of the file /manage_user.php. The manipulation o… |
CVE-2025-10784 | High | 7.3 | 2025-09-22 | A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Affected by this issue is some unknown functionality of the file… |
CVE-2025-10783 | High | 7.3 | 2025-09-22 | A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admi… |
CVE-2025-10782 | High | 7.3 | 2025-09-22 | A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/class.php. Performin… |
CVE-2025-10781 | High | 7.3 | 2025-09-22 | A vulnerability was identified in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/edit_class.php. Such man… |
CVE-2025-10780 | Medium | 6.3 | 2025-09-22 | A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0. This affects an unknown function of the file /view.php. This manipulation of the ar… |
CVE-2025-10762 | Medium | 6.3 | 2025-09-21 | A vulnerability was found in kuaifan DooTask up to 1.2.49. Affected by this vulnerability is an unknown functionality of the file app/Http/Controllers/Api/User… |
CVE-2025-10002 | Medium | 4.9 | 2025-09-20 | The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to SQL Injection via the ex… |
CVE-2025-10652 | Medium | 6.5 | 2025-09-20 | The Robcore Netatmo plugin for WordPress is vulnerable to SQL Injection via the ‘module_id’ attribute of the robcore-netatmo shortcode in all versions up to, a… |
CVE-2025-59431 | Critical | 9.8 | 2025-09-19 | MapServer is a system for developing web-based GIS applications. Prior to 8.4.1, the XML Filter Query directive PropertyName is vulnerably to Boolean-based SQL… |
CVE-2025-10712 | High | 7.3 | 2025-09-19 | A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This issue affects some unknown processing of the file /index.php/Login/login. Pe… |
CVE-2025-10688 | High | 7.3 | 2025-09-18 | A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/operation/pai… |
CVE-2025-10687 | High | 7.3 | 2025-09-18 | A vulnerability was found in SourceCodester Responsive E-Learning System 1.0. This affects an unknown part of the file /admin/add_teacher.php. The manipulation… |
CVE-2025-10673 | High | 7.3 | 2025-09-18 | A vulnerability was determined in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/module… |
CVE-2025-10670 | High | 7.3 | 2025-09-18 | A flaw has been found in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /check_p… |
CVE-2025-10668 | High | 7.3 | 2025-09-18 | A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/compose_msg_admin.php… |
CVE-2025-10667 | High | 7.3 | 2025-09-18 | A weakness has been identified in itsourcecode Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /members/compose_m… |
CVE-2025-40677 | | 2025-09-18 | SQL injection vulnerability in Summar Software´s Portal del Empleado. This vulnerability allows an attacker to retrieve, create, update, and delete the databas… | |
CVE-2025-10665 | Medium | 6.3 | 2025-09-18 | A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Affected is an unknown function of the file /Pro… |
CVE-2025-10664 | High | 7.3 | 2025-09-18 | A vulnerability was determined in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /create-ticket.php. Executing manipulation of the argu… |
CVE-2025-10663 | High | 7.3 | 2025-09-18 | A vulnerability was found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /my-profile.php. Performing manipulation o… |
CVE-2025-10662 | Medium | 4.7 | 2025-09-18 | A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /admin_members.php?ac=editsave. Such manipulation… |
CVE-2025-10627 | Medium | 6.3 | 2025-09-18 | A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /admin/delete_user.php. Such manipul… |
CVE-2025-10626 | Medium | 6.3 | 2025-09-18 | A flaw has been found in SourceCodester Online Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /admin/update_s3.php… |
CVE-2025-10625 | Medium | 6.3 | 2025-09-17 | A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /user/da… |
CVE-2025-10624 | High | 7.3 | 2025-09-17 | A security flaw has been discovered in PHPGurukul User Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation… |
CVE-2025-10623 | High | 7.3 | 2025-09-17 | A vulnerability was identified in SourceCodester Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteuser.php. Such man… |
CVE-2025-10621 | High | 7.3 | 2025-09-17 | A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This… |
CVE-2025-10620 | Medium | 6.3 | 2025-09-17 | A flaw has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file /editp2.php. Executing manipulat… |
CVE-2025-10618 | Medium | 6.3 | 2025-09-17 | A security vulnerability has been detected in itsourcecode Online Clinic Management System 1.0. Affected by this issue is some unknown functionality of the fil… |
CVE-2025-10617 | Medium | 6.3 | 2025-09-17 | A weakness has been identified in SourceCodester Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/posit… |
CVE-2025-10613 | Medium | 6.3 | 2025-09-17 | A vulnerability has been found in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /leveledit1.php. Such ma… |
CVE-2025-10604 | High | 7.3 | 2025-09-17 | A vulnerability was identified in PHPGurukul Online Discussion Forum 1.0. This affects an unknown part of the file /admin/edit_member.php. The manipulation of… |
CVE-2025-10603 | High | 7.3 | 2025-09-17 | A vulnerability was determined in PHPGurukul Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_forum/s… |
CVE-2025-10602 | Medium | 6.3 | 2025-09-17 | A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/dele… |
CVE-2025-10601 | High | 7.3 | 2025-09-17 | A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. Affected is an unknown function of the file /admin/index.php. Such manipulati… |
CVE-2025-10599 | High | 7.3 | 2025-09-17 | A security flaw has been discovered in itsourcecode Web-Based Internet Laboratory Management System 1.0. Impacted is the function User::AuthenticateUser of the… |
CVE-2025-10598 | High | 7.3 | 2025-09-17 | A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This issue affects some unknown processing of the file /admin/search_pro… |
CVE-2025-10597 | High | 7.3 | 2025-09-17 | A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This vulnerability affects unknown code of the f… |
CVE-2025-10596 | High | 7.3 | 2025-09-17 | A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /index.php. The manipulation of the argum… |
CVE-2025-10595 | Medium | 6.3 | 2025-09-17 | A vulnerability has been found in SourceCodester Online Student File Management System 1.0. Affected by this issue is some unknown functionality of the file /a… |
CVE-2025-10594 | Medium | 6.3 | 2025-09-17 | A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admi… |
CVE-2025-10593 | Medium | 6.3 | 2025-09-17 | A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/update_student.php… |
CVE-2025-10592 | Medium | 6.3 | 2025-09-17 | A security vulnerability has been detected in itsourcecode Online Public Access Catalog OPAC 1.0. This impacts an unknown function of the file mysearch.php of… |
CVE-2025-10439 | Critical | 9.8 | 2025-09-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yordam Informatics Yordam Library Automation System allow… |
CVE-2025-10042 | Medium | 5.9 | 2025-09-17 | The Quiz Maker plugin for WordPress is vulnerable to SQL Injection via spoofed IP headers in all versions up to, and including, 6.7.0.56 due to insufficient es… |
CVE-2025-10565 | High | 7.3 | 2025-09-16 | A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /aja… |
CVE-2025-10564 | High | 7.3 | 2025-09-16 | A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=delete_category. Pe… |
CVE-2025-57631 | Critical | 9.8 | 2025-09-16 | SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file upload module |
CVE-2025-10563 | High | 7.3 | 2025-09-16 | A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=save_category… |
CVE-2025-10562 | High | 7.3 | 2025-09-16 | A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=save_product. This man… |
CVE-2024-13174 | High | 8.6 | 2025-09-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E1 Informatics Web Application allows SQL Injection. Thi… |
CVE-2024-13149 | Critical | 9.8 | 2025-09-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor vu… |
CVE-2025-52044 | High | 7.5 | 2025-09-16 | In Frappe ERPNext v15.57.5, the function get_stock_balance() at erpnext/stock/utils.py is vulnerable to SQL Injection, which allows an attacker to extract all… |
CVE-2025-44034 | High | 8.0 | 2025-09-16 | SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the alph parameters in src/main/Java/cn/gson/oasys/… |
CVE-2025-7744 | Critical | 9.8 | 2025-09-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dolusoft Omaspot allows SQL Injection. This issue affect… |
CVE-2024-12913 | High | 8.8 | 2025-09-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Megatek Communication System Azora Wireless Network Manag… |
CVE-2025-4688 | Critical | 9.8 | 2025-09-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL… |
CVE-2025-10483 | Medium | 6.3 | 2025-09-15 | A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admi… |