CWE-89 · SQL Injection (page 42)
Page 42 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-9686 | Medium | 6.3 | 2025-08-30 | A security flaw has been discovered in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /module/AreaConhecimento/edit of… |
CVE-2025-9685 | Medium | 6.3 | 2025-08-30 | A vulnerability was identified in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/AreaConhecimento/view of the comp… |
CVE-2025-9684 | Medium | 6.3 | 2025-08-30 | A vulnerability was determined in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/FormulaMedia/edit of the component Formula d… |
CVE-2025-9679 | High | 7.3 | 2025-08-30 | A security vulnerability has been detected in itsourcecode Student Information System 1.0. This affects an unknown function of the file /course_edit1.php. Such… |
CVE-2025-54946 | Critical | 9.8 | 2025-08-30 | A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands. |
CVE-2025-9678 | High | 7.3 | 2025-08-29 | A weakness has been identified in Campcodes Online Loan Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=delete_… |
CVE-2025-9669 | High | 7.3 | 2025-08-29 | A vulnerability has been found in Jinher OA 1.0. This issue affects some unknown processing of the file GetTreeDate.aspx. The manipulation of the argument ID l… |
CVE-2025-9667 | Medium | 6.3 | 2025-08-29 | A vulnerability was detected in code-projects Simple Grading System 1.0. This affects an unknown part of the file /delete_account.php of the component Admin Pa… |
CVE-2025-9666 | Medium | 6.3 | 2025-08-29 | A security vulnerability has been detected in code-projects Simple Grading System 1.0. Affected by this issue is some unknown functionality of the file /delete… |
CVE-2025-9665 | Medium | 6.3 | 2025-08-29 | A weakness has been identified in code-projects Simple Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_student… |
CVE-2025-44033 | Critical | 9.8 | 2025-08-29 | SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector() method declaration in src/main/ja… |
CVE-2025-29894 | High | 8.8 | 2025-08-29 | An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to… |
CVE-2025-29893 | High | 8.8 | 2025-08-29 | An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to… |
CVE-2025-9664 | Medium | 6.3 | 2025-08-29 | A security flaw has been discovered in code-projects Simple Grading System 1.0. Affected is an unknown function of the file /add_student_grade.php of the compo… |
CVE-2025-9663 | Medium | 6.3 | 2025-08-29 | A vulnerability was identified in code-projects Simple Grading System 1.0. This impacts an unknown function of the file /edit_account.php of the component Admi… |
CVE-2025-9662 | High | 7.3 | 2025-08-29 | A vulnerability was determined in code-projects Simple Grading System 1.0. This affects an unknown function of the file /login.php of the component Admin Panel… |
CVE-2025-9660 | High | 7.3 | 2025-08-29 | A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. The impacted element is an unknown function of the file /passwordrecover.php… |
CVE-2025-9651 | Medium | 6.3 | 2025-08-29 | A vulnerability was found in shafhasan chatbox up to 156a39cde62f78532c3265a70eda12c70907e56f. This impacts an unknown function of the file /chat.php. The mani… |
CVE-2025-9645 | High | 7.3 | 2025-08-29 | A vulnerability was identified in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /t_dashboard/r_all_info.php. The manip… |
CVE-2025-9644 | High | 7.3 | 2025-08-29 | A vulnerability was determined in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/bill_… |
CVE-2025-9643 | High | 7.3 | 2025-08-29 | A vulnerability was found in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/util… |
CVE-2025-9441 | Medium | 6.5 | 2025-08-29 | The iATS Online Forms plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order' parameter in all versions up to, and including, 1.2 due to… |
CVE-2025-9610 | High | 7.3 | 2025-08-29 | A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /create_account.php. Th… |
CVE-2025-8858 | High | 7.5 | 2025-08-29 | Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read… |
CVE-2025-9608 | Medium | 6.3 | 2025-08-29 | A vulnerability has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/FormulaMedia/view of the component Formula d… |
CVE-2025-9607 | Medium | 6.3 | 2025-08-29 | A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /module/TabelaArredondamento/view of… |
CVE-2025-9606 | Medium | 6.3 | 2025-08-29 | A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/agenda_prefere… |
CVE-2025-9601 | High | 7.3 | 2025-08-29 | A vulnerability was detected in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /setting/employee_salary_setup.php. The… |
CVE-2025-9600 | High | 7.3 | 2025-08-29 | A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /s… |
CVE-2025-9599 | High | 7.3 | 2025-08-29 | A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting… |
CVE-2025-9598 | High | 7.3 | 2025-08-29 | A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of the file /setting/year_setup.php. Perfo… |
CVE-2025-9597 | High | 7.3 | 2025-08-29 | A vulnerability was identified in itsourcecode Apartment Management System 1.0. This impacts an unknown function of the file /o_dashboard/rented_all_info.php… |
CVE-2025-9596 | High | 7.3 | 2025-08-29 | A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /login.php. This manipulation of the… |
CVE-2025-9594 | High | 7.3 | 2025-08-28 | A vulnerability has been found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /report/complain_info.p… |
CVE-2025-9593 | High | 7.3 | 2025-08-28 | A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unit_status_info.php. Executing mani… |
CVE-2025-9592 | High | 7.3 | 2025-08-28 | A vulnerability was detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/bill_info.php. Per… |
CVE-2025-57819 | Critical | 9.8 | 2025-08-28 | FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied dat… |
CVE-2025-51972 | Medium | 6.5 | 2025-08-28 | A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input… |
CVE-2025-51971 | Medium | 5.4 | 2025-08-28 | A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Unsanitized user input in th… |
CVE-2025-51969 | Medium | 6.5 | 2025-08-28 | A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online Shopping System Advanced 1.0. This flaw is present in the product_id GET… |
CVE-2025-51968 | Medium | 6.5 | 2025-08-28 | A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize u… |
CVE-2025-54720 | Critical | 9.3 | 2025-08-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SteelThemes Nest Addons nest-addons allows SQL Injection… |
CVE-2025-49404 | High | 8.5 | 2025-08-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in purethemes Listeo Core listeo-core allows SQL Injection.T… |
CVE-2025-49402 | High | 8.5 | 2025-08-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in scriptsbundle Exertio Framework exertio-framework allows… |
CVE-2025-39496 | Critical | 9.3 | 2025-08-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WooBeWoo Product Filter Pro allows SQL Injection.This… |
CVE-2025-8977 | Medium | 6.5 | 2025-08-28 | The Simple Download Monitor plugin for WordPress is vulnerable to time-based SQL Injection via the order parameter in all versions up to, and including, 3.9.33… |
CVE-2025-34162 | | 2025-08-27 | An unauthenticated SQL injection vulnerability exists in the GetLyfsByParams endpoint of Bian Que Feijiu Intelligent Emergency and Quality Control System, acce… | |
CVE-2024-13979 | Critical | 9.8 | 2025-08-27 | A SQL injection vulnerability exists in the St. Joe ERP system ("圣乔ERP系统") that allows unauthenticated remote attackers to execute arbitrary SQL commands via c… |
CVE-2025-51667 | High | 7.0 | 2025-08-27 | An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection… |
CVE-2025-50979 | High | 8.6 | 2025-08-27 | NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint (/api/v3/search/categories). The search query parameter is not properly sani… |
CVE-2025-50984 | Medium | 5.3 | 2025-08-27 | diskover-web v2.3.0 Community Edition is vulnerable to multiple boolean-based blind SQL injection flaws in its Elasticsearch configuration form. Unsanitized us… |
CVE-2025-50983 | High | 8.3 | 2025-08-27 | SQL Injection vulnerability exists in the sortKey parameter of the GET /api/v1/wanted/cutoff API endpoint in readarr 0.4.15.2787. The endpoint fails to properl… |
CVE-2025-50972 | Critical | 9.8 | 2025-08-27 | SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL commands via the tmpl_id parameter to index.php. Thr… |
CVE-2025-9532 | Medium | 6.3 | 2025-08-27 | A flaw has been found in Portabilis i-Educar up to 2.10. This impacts an unknown function of the file /RegraAvaliacao/view. Executing manipulation of the argum… |
CVE-2025-9531 | Medium | 6.3 | 2025-08-27 | A vulnerability was detected in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/agenda.php of the component Agenda Modul… |
CVE-2025-30061 | | 2025-08-27 | In the "utils/Reporter/OpenReportWindow.pl" service, there is an SQL injection vulnerability through the "UserID" parameter. | |
CVE-2025-30060 | | 2025-08-27 | In the ReturnUserUnitsXML.pl service, the "getUserInfo" function is vulnerable to SQL injection through the "UserID" parameter. | |
CVE-2025-30059 | | 2025-08-27 | In the PrepareCDExportJSON.pl service, the "getPerfServiceIds" function is vulnerable to SQL injection. | |
CVE-2025-30058 | | 2025-08-27 | In the PatientService.pl service, the "getPatientIdentifier" function is vulnerable to SQL injection through the "pesel" parameter. | |
CVE-2025-9511 | High | 7.3 | 2025-08-27 | A vulnerability was identified in itsourcecode Apartment Management System 1.0. This vulnerability affects unknown code of the file /visitor/addvisitor.php. Su… |
CVE-2025-9510 | High | 7.3 | 2025-08-27 | A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /branch/add… |
CVE-2025-9509 | High | 7.3 | 2025-08-27 | A security flaw has been discovered in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/fair_info_a… |
CVE-2025-9508 | High | 7.3 | 2025-08-27 | A vulnerability was detected in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /report/rented_info.php… |
CVE-2025-9507 | High | 7.3 | 2025-08-27 | A weakness has been identified in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/visitor_info.php. Executing… |
CVE-2025-9506 | High | 7.3 | 2025-08-27 | A vulnerability has been found in Campcodes Online Loan Management System 1.0. This affects an unknown part of the file /ajax.php?action=delete_plan. Such mani… |
CVE-2025-9505 | High | 7.3 | 2025-08-27 | A flaw has been found in Campcodes Online Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_lo… |
CVE-2025-9504 | High | 7.3 | 2025-08-27 | A vulnerability was detected in Campcodes Online Loan Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?a… |
CVE-2025-9503 | High | 7.3 | 2025-08-27 | A security vulnerability has been detected in Campcodes Online Loan Management System 1.0. Affected is an unknown function of the file /ajax.php?action=save_bo… |
CVE-2025-9502 | High | 7.3 | 2025-08-27 | A weakness has been identified in Campcodes Online Loan Management System 1.0. This impacts an unknown function of the file /ajax.php?action=save_payment. Exec… |
CVE-2025-9492 | High | 7.3 | 2025-08-26 | A vulnerability was determined in Campcodes Online Water Billing System 1.0. This affects an unknown function of the file /addclient1.php. Executing manipulati… |
CVE-2025-9473 | High | 7.3 | 2025-08-26 | A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The… |
CVE-2025-9472 | High | 7.3 | 2025-08-26 | A vulnerability was found in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /owner_utility/add_owner_util… |
CVE-2025-9471 | High | 7.3 | 2025-08-26 | A vulnerability has been found in itsourcecode Apartment Management System 1.0. This vulnerability affects unknown code of the file /maintenance/add_maintenanc… |
CVE-2025-9470 | High | 7.3 | 2025-08-26 | A flaw has been found in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /management/add_m_committee.php. Executing mani… |
CVE-2025-9469 | High | 7.3 | 2025-08-26 | A vulnerability was detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /fund/add_fund.p… |
CVE-2025-9468 | High | 7.3 | 2025-08-26 | A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2025-9172 | High | 7.5 | 2025-08-26 | The Vibes plugin for WordPress is vulnerable to time-based SQL Injection via the ‘resource’ parameter in all versions up to, and including, 2.2.0 due to insuff… |
CVE-2025-9444 | High | 7.3 | 2025-08-26 | A vulnerability has been found in 1000projects Online Project Report Submission and Evaluation System 1.0. This issue affects some unknown processing of the fi… |
CVE-2025-9426 | High | 7.3 | 2025-08-25 | A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /package.php. Executing m… |
CVE-2025-9425 | High | 7.3 | 2025-08-25 | A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the f… |
CVE-2025-9423 | High | 7.3 | 2025-08-25 | A vulnerability was determined in Campcodes Online Water Billing System 1.0. Affected is an unknown function of the file /editecex.php. This manipulation of th… |
CVE-2025-9421 | High | 7.3 | 2025-08-25 | A vulnerability has been found in itsourcecode Apartment Management System 1.0. This affects an unknown function of the file /complain/addcomplain.php. The man… |
CVE-2025-9420 | High | 7.3 | 2025-08-25 | A flaw has been found in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /floor/addfloor.php. Executing m… |
CVE-2025-9419 | High | 7.3 | 2025-08-25 | A vulnerability was detected in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /unit/addunit.php. Perfor… |
CVE-2025-9418 | High | 7.3 | 2025-08-25 | A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /owner/addowner.php. Su… |
CVE-2025-9417 | Medium | 6.3 | 2025-08-25 | A weakness has been identified in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /employee/addemployee.ph… |
CVE-2025-9413 | Medium | 6.3 | 2025-08-25 | A flaw has been found in lostvip-com ruoyi-go up to 2.1. This impacts the function SelectListByPage of the file modules/system/system_router.go. This manipulat… |
CVE-2025-9412 | Medium | 6.3 | 2025-08-25 | A vulnerability was detected in lostvip-com ruoyi-go up to 2.1. This affects the function SelectListByPage of the file modules/system/dao/DictDataDao.go. The m… |
CVE-2025-50383 | High | 8.1 | 2025-08-25 | alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter. |
CVE-2025-9411 | Medium | 6.3 | 2025-08-25 | A security vulnerability has been detected in lostvip-com ruoyi-go up to 2.1. The impacted element is the function SelectPageList of the file modules/system/se… |
CVE-2025-9410 | Medium | 6.3 | 2025-08-25 | A weakness has been identified in lostvip-com ruoyi-go up to 2.1. The affected element is the function SelectListByPage of the file modules/system/dao/GenTable… |
CVE-2025-55575 | Critical | 9.8 | 2025-08-25 | SQL Injection vulnerability in SMM Panel 3.1 allowing remote attackers to gain sensitive information via a crafted HTTP request with action=service_detail. |
CVE-2025-56216 | High | 8.5 | 2025-08-25 | phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pagetitle parameter. |
CVE-2025-56215 | Medium | 6.5 | 2025-08-25 | phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle parameter. |
CVE-2025-56214 | Critical | 9.8 | 2025-08-25 | phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in index.php via the username parameter. |
CVE-2025-56212 | Critical | 9.8 | 2025-08-25 | phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname parameter. |
CVE-2025-9399 | Medium | 6.3 | 2025-08-25 | A vulnerability was detected in YiFang CMS up to 2.0.5. Affected by this issue is some unknown functionality of the file app/logic/L_tool.php. The manipulation… |
CVE-2025-9391 | Medium | 6.3 | 2025-08-24 | A weakness has been identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this issue is the function getFieldValue of the component com.artery.workflow.Servi… |
CVE-2025-6791 | High | 8.8 | 2025-08-22 | In the monitoring event logs page, it is possible to alter the http request to insert a reflect payload in the DB. Caused by an Improper Neutralization of Spec… |
CVE-2025-51092 | Critical | 9.8 | 2025-08-22 | The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe construction of SQL queries in DataBase.php. The functions logIn() and… |