CWE-89 · SQL Injection (page 44)
Page 44 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-8936 | High | 7.3 | 2025-08-14 | A vulnerability was determined in 1000 Projects Sales Management System 1.0. Affected by this issue is some unknown functionality of the file /superstore/dist/… |
CVE-2025-8935 | High | 7.3 | 2025-08-14 | A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/cust… |
CVE-2025-8932 | High | 7.3 | 2025-08-14 | A vulnerability was determined in 1000 Projects Sales Management System 1.0. This vulnerability affects unknown code of the file /superstore/admin/sales.php. T… |
CVE-2025-8931 | Medium | 6.3 | 2025-08-14 | A vulnerability was determined in code-projects Medical Store Management System 1.0. Affected is an unknown function of the file ChangePassword.java. The manip… |
CVE-2025-8930 | Medium | 6.3 | 2025-08-14 | A vulnerability was found in code-projects Medical Store Management System 1.0. This issue affects some unknown processing of the file UpdateCompany.java of th… |
CVE-2025-8929 | Medium | 6.3 | 2025-08-13 | A vulnerability has been found in code-projects Medical Store Management System 1.0. This vulnerability affects unknown code of the file MainPanel.java. The ma… |
CVE-2025-8928 | Medium | 6.3 | 2025-08-13 | A vulnerability was identified in code-projects Medical Store Management System 1.0. This affects an unknown part of the file UpdateMedicines.java of the compo… |
CVE-2025-8926 | High | 7.3 | 2025-08-13 | A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /log… |
CVE-2025-8925 | High | 7.3 | 2025-08-13 | A vulnerability has been found in itsourcecode Sports Management System 1.0. Affected is an unknown function of the file /Admin/match.php. The manipulation of… |
CVE-2025-8924 | High | 7.3 | 2025-08-13 | A vulnerability was identified in Campcodes Online Water Billing System 1.0. This issue affects some unknown processing of the file /viewbill.php. The manipula… |
CVE-2025-8923 | High | 7.3 | 2025-08-13 | A vulnerability was determined in code-projects Job Diary 1.0. This vulnerability affects unknown code of the file /edit-details.php. The manipulation of the a… |
CVE-2025-8922 | High | 7.3 | 2025-08-13 | A vulnerability was found in code-projects Job Diary 1.0. This affects an unknown part of the file /admin-inbox.php. The manipulation of the argument ID leads… |
CVE-2025-8921 | High | 7.3 | 2025-08-13 | A vulnerability has been found in code-projects Job Diary 1.0. Affected by this issue is some unknown functionality of the file /user-apply.php. The manipulati… |
CVE-2025-8908 | Medium | 6.3 | 2025-08-13 | A vulnerability was determined in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. Affected by this issue is some unknown functionality of… |
CVE-2025-8914 | Medium | 6.5 | 2025-08-13 | Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL command… |
CVE-2025-6184 | High | 8.8 | 2025-08-13 | The Tutor LMS Pro – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter used in the g… |
CVE-2025-55168 | Critical | 9.8 | 2025-08-12 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a SQL Injection vulnerability… |
CVE-2025-53727 | High | 8.8 | 2025-08-12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a n… |
CVE-2025-49759 | High | 8.8 | 2025-08-12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a n… |
CVE-2025-47954 | High | 8.8 | 2025-08-12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a n… |
CVE-2025-55167 | Critical | 9.8 | 2025-08-12 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a SQL Injection vulnerability… |
CVE-2025-8296 | High | 7.2 | 2025-08-12 | SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to execute arbitrary SQL queries. In c… |
CVE-2025-55156 | | 2025-08-11 | pyLoad is the free and open-source Download Manager written in pure Python. Prior to version 0.5.0b3.dev91, the parameter add_links in API /json/add_package is… | |
CVE-2024-32640 | Critical | 9.8 | 2025-08-11 | MASA CMS is an Enterprise Content Management platform based on open source technology. Versions prior to 7.4.5, 7.3.12, and 7.2.7 contain a SQL injection vulne… |
CVE-2025-8811 | High | 7.3 | 2025-08-10 | A vulnerability, which was classified as critical, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality… |
CVE-2025-8809 | High | 7.3 | 2025-08-10 | A vulnerability classified as critical has been found in code-projects Online Medicine Guide 1.0. Affected is an unknown function of the file /addelidetails.ph… |
CVE-2025-8806 | Medium | 6.3 | 2025-08-10 | A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. It has been classified as critical. This affects an unknow… |
CVE-2025-8773 | High | 7.3 | 2025-08-09 | A vulnerability, which was classified as critical, was found in Dinstar Monitoring Platform 甘肃省危险品库监控平台 1.0. Affected is an unknown function of the file /itc/$… |
CVE-2025-8744 | High | 7.3 | 2025-08-09 | A vulnerability classified as critical was found in CesiumLab Web up to 4.0. This vulnerability affects unknown code of the file /lodmodels/. The manipulation… |
CVE-2012-10047 | | 2025-08-08 | Cyclope Employee Surveillance Solution versions 6.x are vulnerable to a SQL injection flaw in its login mechanism. The username parameter in the auth-login POS… | |
CVE-2025-52914 | High | 8.8 | 2025-08-08 | A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.101) could allow an authenticated attacker to condu… |
CVE-2025-50928 | Medium | 4.8 | 2025-08-08 | Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the Change Settings function. |
CVE-2025-50468 | Medium | 6.5 | 2025-08-08 | OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the DocStoreDAO interface… |
CVE-2025-50467 | Medium | 6.5 | 2025-08-08 | OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO inter… |
CVE-2025-50466 | High | 7.1 | 2025-08-08 | OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO inter… |
CVE-2025-50465 | High | 7.1 | 2025-08-08 | OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO inter… |
CVE-2025-8706 | Medium | 6.3 | 2025-08-08 | A vulnerability has been found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0 and classified as critical. Affected by this vulnerability is… |
CVE-2025-8705 | Medium | 6.3 | 2025-08-08 | A vulnerability, which was classified as critical, was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. Affected is an unknown function… |
CVE-2025-8704 | Medium | 6.3 | 2025-08-08 | A vulnerability, which was classified as critical, has been found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. This issue affects some un… |
CVE-2025-8703 | Medium | 6.3 | 2025-08-08 | A vulnerability classified as critical was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. This vulnerability affects unknown code of… |
CVE-2025-8702 | Medium | 6.3 | 2025-08-08 | A vulnerability classified as critical has been found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. This affects an unknown part of the fi… |
CVE-2025-8701 | Medium | 6.3 | 2025-08-07 | A vulnerability was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. It has been rated as critical. Affected by this issue is some unkn… |
CVE-2023-41532 | High | 8.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctor_contact parameter in doctorsearch.php. |
CVE-2023-41531 | High | 8.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters. |
CVE-2023-41530 | Critical | 9.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php. |
CVE-2023-41528 | Critical | 9.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters. |
CVE-2023-41527 | Critical | 9.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php. |
CVE-2023-41526 | Critical | 9.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters. |
CVE-2023-41525 | Critical | 9.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php. |
CVE-2023-41524 | High | 8.8 | 2025-08-07 | Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php. |
CVE-2023-41523 | High | 8.8 | 2025-08-07 | Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress parameter at createClassTeacher.php. |
CVE-2023-41522 | High | 8.8 | 2025-08-07 | Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admis… |
CVE-2023-41521 | High | 8.8 | 2025-08-07 | Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessi… |
CVE-2023-41520 | High | 8.8 | 2025-08-07 | Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmNam… |
CVE-2023-40992 | Medium | 6.5 | 2025-08-07 | Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter. |
CVE-2025-54396 | Medium | 5.4 | 2025-08-07 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection. Authenticated users can exploit this. |
CVE-2025-54788 | High | 8.8 | 2025-08-07 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions and below, the InboundEmail module allows… |
CVE-2025-7036 | High | 7.5 | 2025-08-06 | The CleverReach® WP plugin for WordPress is vulnerable to time-based SQL Injection via the ‘title’ parameter in all versions up to, and including, 1.5.20 due t… |
CVE-2025-6986 | Medium | 6.5 | 2025-08-06 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in all versions up… |
CVE-2025-54865 | High | 7.3 | 2025-08-05 | Tilesheets MediaWiki Extension adds a table lookup parser function for an item and returns the requested image. A missing backtick in a query executed by the T… |
CVE-2025-54119 | Critical | 10.0 | 2025-08-05 | ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. In versions 5.22.9 and below, improper escaping… |
CVE-2025-50341 | Critical | 9.8 | 2025-08-04 | A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the _domain parameter. An attacker can manipulate the SQL query logic and determ… |
CVE-2025-8503 | High | 7.3 | 2025-08-03 | A vulnerability, which was classified as critical, has been found in code-projects Online Medicine Guide 1.0. Affected by this issue is some unknown functional… |
CVE-2025-8502 | High | 7.3 | 2025-08-03 | A vulnerability classified as critical was found in code-projects Online Medicine Guide 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-8500 | Medium | 6.3 | 2025-08-03 | A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been rated as critical. This issue affects some unknown processing of t… |
CVE-2025-8499 | High | 7.3 | 2025-08-03 | A vulnerability was found in code-projects Online Medicine Guide 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cu… |
CVE-2025-8498 | High | 7.3 | 2025-08-03 | A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /cart/index.php. Suc… |
CVE-2025-8497 | High | 7.3 | 2025-08-03 | A weakness has been identified in code-projects Online Medicine Guide 1.0. This affects an unknown part of the file /cusfindphar2.php. This manipulation of the… |
CVE-2025-8496 | High | 7.3 | 2025-08-03 | A vulnerability has been found in projectworlds Online Admission System 1.0 and classified as critical. Affected by this vulnerability is an unknown functional… |
CVE-2025-8495 | High | 7.3 | 2025-08-03 | A vulnerability, which was classified as critical, was found in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the f… |
CVE-2025-8494 | High | 7.3 | 2025-08-03 | A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0. This issue affects some unknown pro… |
CVE-2025-8493 | High | 7.3 | 2025-08-02 | A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. This vulnerability affects unknown code of the file… |
CVE-2025-8471 | High | 7.3 | 2025-08-02 | A vulnerability, which was classified as critical, has been found in projectworlds Online Admission System 1.0. This issue affects some unknown processing of t… |
CVE-2025-8470 | High | 7.3 | 2025-08-02 | A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /ad… |
CVE-2025-8469 | High | 7.3 | 2025-08-02 | A vulnerability classified as critical has been found in SourceCodester Online Hotel Reservation System 1.0. This affects an unknown part of the file /admin/de… |
CVE-2025-8468 | High | 7.3 | 2025-08-02 | A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /… |
CVE-2025-8467 | High | 7.3 | 2025-08-02 | A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of t… |
CVE-2025-8466 | High | 7.3 | 2025-08-02 | A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /forgot_pass… |
CVE-2025-54790 | Medium | 6.5 | 2025-08-02 | Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, Files does not have logic to prevent the exploitation of ba… |
CVE-2013-10044 | High | 8.8 | 2025-08-01 | An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credentials and… |
CVE-2025-50868 | Medium | 6.5 | 2025-08-01 | A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0. The Q4 POST parameter is not properly sanitized before… |
CVE-2025-52390 | Critical | 9.1 | 2025-08-01 | Saurus CMS Community Edition since commit d886e5b0 (2010-04-23) is vulnerable to a SQL Injection vulnerability in the `prepareSearchQuery()` method in `Fulltex… |
CVE-2025-52327 | High | 7.8 | 2025-08-01 | SQL Injection vulnerability in Restaurant Order System 1.0 allows a local attacker to obtain sensitive information via the payment.php file |
CVE-2025-41375 | Critical | 9.8 | 2025-08-01 | SQL Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability allows an attacker to retrieve, create, update and delete database via 'token' par… |
CVE-2025-41374 | High | 8.8 | 2025-08-01 | A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated… |
CVE-2025-41373 | High | 8.8 | 2025-08-01 | A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated… |
CVE-2025-41372 | High | 8.8 | 2025-08-01 | A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated… |
CVE-2025-41371 | High | 8.8 | 2025-08-01 | A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated… |
CVE-2025-41370 | High | 8.8 | 2025-08-01 | A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated… |
CVE-2025-8443 | High | 7.3 | 2025-08-01 | A vulnerability was found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fi… |
CVE-2025-8442 | High | 7.3 | 2025-08-01 | A vulnerability has been found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this vulnerability is an unknown functionalit… |
CVE-2025-8441 | High | 7.3 | 2025-08-01 | A vulnerability, which was classified as critical, was found in code-projects Online Medicine Guide 1.0. Affected is an unknown function of the file /pharsignu… |
CVE-2025-8439 | High | 7.3 | 2025-08-01 | A vulnerability, which was classified as critical, has been found in code-projects Wazifa System 1.0. This issue affects some unknown processing of the file /c… |
CVE-2025-8438 | High | 7.3 | 2025-08-01 | A vulnerability classified as critical was found in code-projects Wazifa System 1.0. This vulnerability affects unknown code of the file /controllers/postpubli… |
CVE-2025-8437 | High | 7.3 | 2025-08-01 | A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. Th… |
CVE-2025-8436 | High | 7.3 | 2025-08-01 | A vulnerability was found in projectworlds Online Admission System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-8431 | High | 7.3 | 2025-08-01 | A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/add… |
CVE-2024-34327 | Medium | 6.5 | 2025-07-31 | Sielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability via the email address field of the password reset form. |
CVE-2025-8409 | High | 7.3 | 2025-07-31 | A vulnerability has been found in code-projects Vehicle Management 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality o… |
CVE-2025-50867 | Medium | 6.5 | 2025-07-31 | A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter is directly embedde… |