CWE-89 · SQL Injection (page 44)
Page 44 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-62388 | Medium | 6.5 | 2025-10-13 | SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. |
CVE-2025-62387 | Medium | 6.5 | 2025-10-13 | SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. |
CVE-2025-62386 | Medium | 6.5 | 2025-10-13 | SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. |
CVE-2025-62385 | Medium | 6.5 | 2025-10-13 | SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. |
CVE-2025-62384 | Medium | 6.5 | 2025-10-13 | SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. |
CVE-2025-62383 | Medium | 6.5 | 2025-10-13 | SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. |
CVE-2025-62360 | High | 8.8 | 2025-10-13 | WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Prior to 3.5.1, a SQL Injection vulnerability was identified in… |
CVE-2025-62179 | High | 8.8 | 2025-10-13 | WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a SQL Injection vulnerability was identified in… |
CVE-2025-62177 | High | 8.8 | 2025-10-13 | WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a SQL Injection vulnerability was identified in… |
CVE-2025-11623 | Medium | 6.5 | 2025-10-13 | SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. |
CVE-2025-6919 | Critical | 9.8 | 2025-10-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cats Information Technology Software Development Technolo… |
CVE-2025-11668 | Medium | 4.7 | 2025-10-13 | A vulnerability was determined in code-projects Automated Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/update_use… |
CVE-2025-11667 | Medium | 6.3 | 2025-10-13 | A vulnerability was found in code-projects Automated Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add_candi… |
CVE-2025-11664 | Medium | 4.7 | 2025-10-13 | A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /ad… |
CVE-2025-11663 | Medium | 4.7 | 2025-10-13 | A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/manage-s… |
CVE-2025-11662 | High | 7.3 | 2025-10-13 | A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. Impacted is an unknown function of the file /booking.php. The manipulat… |
CVE-2025-11654 | High | 7.3 | 2025-10-13 | A vulnerability was identified in yousaf530 Inferno Online Clothing Store up to 827dd42bfbe380e8de76fdc67958c24cf1246208. The affected element is an unknown fu… |
CVE-2025-11629 | Medium | 6.3 | 2025-10-12 | A vulnerability has been found in RainyGao DocSys up to 2.02.36. This impacts the function getUserList of the file /Manage/getUserList.do. Such manipulation le… |
CVE-2025-11628 | Medium | 4.7 | 2025-10-12 | A flaw has been found in jimit105 Project-Online-Shopping-Website up to 7d892f442bd8a96dd242dbe2b9bd5ed641e13e64. This affects an unknown function of the file… |
CVE-2025-11615 | High | 7.3 | 2025-10-11 | A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add_invoice.php. Perfor… |
CVE-2025-11614 | High | 7.3 | 2025-10-11 | A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/edit… |
CVE-2025-11613 | Medium | 6.3 | 2025-10-11 | A vulnerability was found in code-projects Simple Food Ordering System 1.0. Affected is an unknown function of the file /addcategory.php. The manipulation of t… |
CVE-2025-11612 | Medium | 6.3 | 2025-10-11 | A vulnerability has been found in code-projects Simple Food Ordering System 1.0. This impacts an unknown function of the file /addproduct.php. The manipulation… |
CVE-2025-11611 | Medium | 6.3 | 2025-10-11 | A weakness has been identified in SourceCodester Simple Inventory System 1.0. Impacted is an unknown function of the file /user.php. This manipulation of the a… |
CVE-2025-11610 | Medium | 6.3 | 2025-10-11 | A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown processing of the file /brand.php. The manip… |
CVE-2025-11608 | High | 7.3 | 2025-10-11 | A security vulnerability has been detected in code-projects E-Banking System 1.0. This affects an unknown function of the file /register.php of the component P… |
CVE-2025-11606 | Medium | 6.3 | 2025-10-11 | A security flaw has been discovered in iPynch Social Network Website up to b6933b6d7f82c84819abe458ccf0e59d61119541. The affected element is an unknown functio… |
CVE-2025-11605 | Medium | 6.3 | 2025-10-11 | A vulnerability was identified in code-projects Client Details System 1.0. Impacted is an unknown function of the file /admin/update-profile.php. Such manipula… |
CVE-2025-11604 | High | 7.3 | 2025-10-11 | A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This m… |
CVE-2025-11603 | Medium | 6.3 | 2025-10-11 | A vulnerability was found in code-projects Simple Food Ordering System 1.0. This vulnerability affects unknown code of the file /editproduct.php. The manipulat… |
CVE-2025-11601 | High | 7.3 | 2025-10-11 | A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login… |
CVE-2025-11600 | Medium | 6.3 | 2025-10-11 | A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected is an unknown function of the file editcategory.php. Such… |
CVE-2025-11599 | High | 7.3 | 2025-10-11 | A weakness has been identified in Campcodes Online Apartment Visitor Management System 1.0. This impacts an unknown function of the file /forgot-password.php… |
CVE-2025-11597 | Medium | 6.3 | 2025-10-11 | A vulnerability was identified in code-projects E-Commerce Website 1.0. The impacted element is an unknown function of the file /pages/product_add_qty.php. The… |
CVE-2025-9947 | Medium | 4.9 | 2025-10-11 | The Custom 404 Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ‘path’ parameter in all versions up to, and including, 3.12.0 due to… |
CVE-2025-11596 | High | 7.3 | 2025-10-11 | A vulnerability was determined in code-projects E-Commerce Website 1.0. The affected element is an unknown function of the file /pages/delete_order_details.php… |
CVE-2025-11595 | Medium | 4.7 | 2025-10-11 | A vulnerability was found in Campcodes Online Apartment Visitor Management System 1.0. Impacted is an unknown function of the file /admin-profile.php. Performi… |
CVE-2025-10175 | Medium | 6.5 | 2025-10-11 | The WP Links Page plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 4.9.6 due to insufficient es… |
CVE-2025-10185 | Medium | 4.9 | 2025-10-11 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in the action nf_load_form… |
CVE-2025-10048 | Medium | 4.9 | 2025-10-11 | The My auctions allegro plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up to, and including, 3.6.31 due to insuf… |
CVE-2025-11593 | Medium | 6.3 | 2025-10-11 | A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin/actions/delete-equipment.php. This man… |
CVE-2025-11592 | Medium | 6.3 | 2025-10-11 | A vulnerability was detected in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/edit-equipmentform.php. The manipulation o… |
CVE-2025-11591 | Medium | 6.3 | 2025-10-11 | A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/acti… |
CVE-2025-11590 | Medium | 6.3 | 2025-10-11 | A weakness has been identified in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/equipment-… |
CVE-2025-11589 | Medium | 6.3 | 2025-10-10 | A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing a m… |
CVE-2025-11588 | Medium | 6.3 | 2025-10-10 | A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of t… |
CVE-2025-11585 | High | 7.3 | 2025-10-10 | A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The manipulati… |
CVE-2025-11584 | High | 7.3 | 2025-10-10 | A vulnerability has been found in code-projects Online Job Search Engine 1.0. The affected element is an unknown function of the file /searchjob.php. The manip… |
CVE-2025-11583 | High | 7.3 | 2025-10-10 | A flaw has been found in code-projects Online Job Search Engine 1.0. Impacted is an unknown function of the file /postjob.php. Executing manipulation of the ar… |
CVE-2025-11582 | High | 7.3 | 2025-10-10 | A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registration.php. Performin… |
CVE-2025-60269 | Critical | 9.4 | 2025-10-10 | JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExport… |
CVE-2025-60307 | Critical | 9.8 | 2025-10-10 | code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the login page can… |
CVE-2025-11188 | High | 7.3 | 2025-10-10 | The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding da… |
CVE-2025-11558 | High | 7.3 | 2025-10-09 | A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/user_index_search.php. Performing manipul… |
CVE-2025-11557 | High | 7.3 | 2025-10-09 | A vulnerability has been found in projectworlds Gate Pass Management System 1.0. This issue affects some unknown processing of the file /add-pass.php. Such man… |
CVE-2025-11556 | High | 7.3 | 2025-10-09 | A flaw has been found in code-projects Simple Leave Manager 1.0. This vulnerability affects unknown code of the file /user.php. This manipulation of the argume… |
CVE-2025-11555 | High | 7.3 | 2025-10-09 | A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/calendar_of_events.php. The ma… |
CVE-2025-60316 | Critical | 9.4 | 2025-10-09 | SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/view_customer.php via the ID parameter. |
CVE-2025-11553 | Medium | 6.3 | 2025-10-09 | A weakness has been identified in code-projects Courier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-cour… |
CVE-2025-11552 | Medium | 6.3 | 2025-10-09 | A vulnerability was identified in code-projects Online Complaint Site 1.0. This impacts an unknown function of the file /admin/category.php. Such manipulation… |
CVE-2025-60267 | Medium | 6.5 | 2025-10-09 | In xckk v9.6, there is a SQL injection vulnerability in which the cond parameter in notice/list is not securely filtered, resulting in a SQL injection vulnerab… |
CVE-2025-11551 | Medium | 6.3 | 2025-10-09 | A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file src/students/Database.java. This manip… |
CVE-2025-60266 | Medium | 6.5 | 2025-10-09 | In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vuln… |
CVE-2025-60265 | Medium | 6.5 | 2025-10-09 | In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securely filtered, resulting in a SQL injection vulnera… |
CVE-2025-62228 | High | 8.8 | 2025-10-09 | Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even thro… |
CVE-2025-10862 | High | 7.5 | 2025-10-09 | The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to SQL Injection in a… |
CVE-2025-11530 | Medium | 6.3 | 2025-10-09 | A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation… |
CVE-2025-10586 | Critical | 9.8 | 2025-10-09 | The Community Events plugin for WordPress is vulnerable to SQL Injection via the ‘event_venue’ parameter in all versions up to, and including, 1.5.1 due to ins… |
CVE-2025-11516 | Medium | 6.3 | 2025-10-09 | A weakness has been identified in code-projects Online Complaint Site 1.0. Impacted is an unknown function of the file /cms/users/complaint-details.php. Execut… |
CVE-2025-11515 | Medium | 6.3 | 2025-10-09 | A security flaw has been discovered in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/users/register-comp… |
CVE-2025-11514 | Medium | 6.3 | 2025-10-09 | A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of the file /cms/users/index.php. Such manip… |
CVE-2025-11513 | High | 7.3 | 2025-10-09 | A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplier_update.php. This manipulation… |
CVE-2025-11511 | Medium | 6.3 | 2025-10-08 | A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplier_add.php. Executing manipulation of t… |
CVE-2025-11509 | Medium | 6.3 | 2025-10-08 | A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/product_add.php. Performing manipulat… |
CVE-2025-11507 | High | 7.3 | 2025-10-08 | A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/search-invoic… |
CVE-2025-11506 | High | 7.3 | 2025-10-08 | A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/search-a… |
CVE-2025-11505 | High | 7.3 | 2025-10-08 | A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of the file /admin/new-appointment.php. The… |
CVE-2025-60311 | High | 8.8 | 2025-10-08 | ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in the profile/edit.php page |
CVE-2025-11503 | High | 7.3 | 2025-10-08 | A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown processing of the file /admin/manage-service… |
CVE-2025-11487 | Medium | 6.3 | 2025-10-08 | A security flaw has been discovered in SourceCodester Farm Management System 1.0. Affected by this issue is some unknown functionality of the file /uploadProdu… |
CVE-2025-11486 | Medium | 6.3 | 2025-10-08 | A vulnerability was identified in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /buyNow.php… |
CVE-2025-11481 | Medium | 6.3 | 2025-10-08 | A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-System up to dc9e0393d826fbc85fad9755b5bc12cba1919df2. The impacted element is an u… |
CVE-2025-11480 | High | 7.3 | 2025-10-08 | A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performi… |
CVE-2025-11479 | High | 7.3 | 2025-10-08 | A security vulnerability has been detected in SourceCodester Wedding Reservation Management System 1.0. Impacted is the function insertReservation of the file… |
CVE-2025-11478 | Medium | 6.3 | 2025-10-08 | A weakness has been identified in SourceCodester Farm Management System 1.0. This issue affects some unknown processing of the file /myCart.php. This manipulat… |
CVE-2025-11477 | High | 7.3 | 2025-10-08 | A security flaw has been discovered in SourceCodester Wedding Reservation Management System 1.0. This vulnerability affects unknown code of the file /global.ph… |
CVE-2025-11476 | High | 7.3 | 2025-10-08 | A vulnerability was identified in SourceCodester Simple E-Commerce Bookstore 1.0. This affects an unknown part of the file /index.php. The manipulation of the… |
CVE-2025-11475 | High | 7.3 | 2025-10-08 | A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /view_… |
CVE-2025-11474 | Medium | 6.3 | 2025-10-08 | A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit… |
CVE-2025-11473 | High | 7.3 | 2025-10-08 | A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected is an unknown function of the file /edit_curr.php. Such manipu… |
CVE-2025-11472 | High | 7.3 | 2025-10-08 | A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /edit_room.php. This manipulation o… |
CVE-2025-11471 | High | 7.3 | 2025-10-08 | A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /edit_customer.php. The mani… |
CVE-2025-10649 | Medium | 6.5 | 2025-10-08 | The Welcart e-Commerce plugin for WordPress is vulnerable to SQL Injection via the cookie in all versions up to, and including, 2.11.21 due to insufficient esc… |
CVE-2025-10351 | | 2025-10-08 | SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, creat… | |
CVE-2025-11469 | Medium | 6.3 | 2025-10-08 | A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /pages/save_cus… |
CVE-2025-11434 | High | 7.3 | 2025-10-08 | A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a ma… |
CVE-2025-11432 | High | 7.3 | 2025-10-08 | A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /reset.php. Such manipulation of the a… |
CVE-2025-11204 | High | 7.2 | 2025-10-08 | The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to SQL Injection in all versio… |
CVE-2025-11431 | Medium | 6.3 | 2025-10-08 | A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. The impacted element is an unknown function of the file /transaction.ph… |
CVE-2025-11430 | High | 7.3 | 2025-10-08 | A vulnerability was found in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /cart.php. The manipulatio… |