CWE-89 · SQL Injection (page 47)
Page 47 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-10782 | High | 7.3 | 2025-09-22 | A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/class.php. Performin… |
CVE-2025-10781 | High | 7.3 | 2025-09-22 | A vulnerability was identified in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/edit_class.php. Such man… |
CVE-2025-10780 | Medium | 6.3 | 2025-09-22 | A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0. This affects an unknown function of the file /view.php. This manipulation of the ar… |
CVE-2025-10762 | Medium | 6.3 | 2025-09-21 | A vulnerability was found in kuaifan DooTask up to 1.2.49. Affected by this vulnerability is an unknown functionality of the file app/Http/Controllers/Api/User… |
CVE-2025-10002 | Medium | 4.9 | 2025-09-20 | The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to SQL Injection via the ex… |
CVE-2025-10652 | Medium | 6.5 | 2025-09-20 | The Robcore Netatmo plugin for WordPress is vulnerable to SQL Injection via the ‘module_id’ attribute of the robcore-netatmo shortcode in all versions up to, a… |
CVE-2025-59431 | Critical | 9.8 | 2025-09-19 | MapServer is a system for developing web-based GIS applications. Prior to 8.4.1, the XML Filter Query directive PropertyName is vulnerably to Boolean-based SQL… |
CVE-2025-10712 | High | 7.3 | 2025-09-19 | A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This issue affects some unknown processing of the file /index.php/Login/login. Pe… |
CVE-2025-10688 | High | 7.3 | 2025-09-18 | A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/operation/pai… |
CVE-2025-10687 | High | 7.3 | 2025-09-18 | A vulnerability was found in SourceCodester Responsive E-Learning System 1.0. This affects an unknown part of the file /admin/add_teacher.php. The manipulation… |
CVE-2025-10673 | High | 7.3 | 2025-09-18 | A vulnerability was determined in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/module… |
CVE-2025-10670 | High | 7.3 | 2025-09-18 | A flaw has been found in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /check_p… |
CVE-2025-10668 | High | 7.3 | 2025-09-18 | A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/compose_msg_admin.php… |
CVE-2025-10667 | High | 7.3 | 2025-09-18 | A weakness has been identified in itsourcecode Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /members/compose_m… |
CVE-2025-40677 | | 2025-09-18 | SQL injection vulnerability in Summar Software´s Portal del Empleado. This vulnerability allows an attacker to retrieve, create, update, and delete the databas… | |
CVE-2025-10665 | Medium | 6.3 | 2025-09-18 | A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Affected is an unknown function of the file /Pro… |
CVE-2025-10664 | High | 7.3 | 2025-09-18 | A vulnerability was determined in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /create-ticket.php. Executing manipulation of the argu… |
CVE-2025-10663 | High | 7.3 | 2025-09-18 | A vulnerability was found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /my-profile.php. Performing manipulation o… |
CVE-2025-10662 | Medium | 4.7 | 2025-09-18 | A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /admin_members.php?ac=editsave. Such manipulation… |
CVE-2025-10627 | Medium | 6.3 | 2025-09-18 | A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /admin/delete_user.php. Such manipul… |
CVE-2025-10626 | Medium | 6.3 | 2025-09-18 | A flaw has been found in SourceCodester Online Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /admin/update_s3.php… |
CVE-2025-10625 | Medium | 6.3 | 2025-09-17 | A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /user/da… |
CVE-2025-10624 | High | 7.3 | 2025-09-17 | A security flaw has been discovered in PHPGurukul User Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation… |
CVE-2025-10623 | High | 7.3 | 2025-09-17 | A vulnerability was identified in SourceCodester Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteuser.php. Such man… |
CVE-2025-10621 | High | 7.3 | 2025-09-17 | A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This… |
CVE-2025-10620 | Medium | 6.3 | 2025-09-17 | A flaw has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file /editp2.php. Executing manipulat… |
CVE-2025-10618 | Medium | 6.3 | 2025-09-17 | A security vulnerability has been detected in itsourcecode Online Clinic Management System 1.0. Affected by this issue is some unknown functionality of the fil… |
CVE-2025-10617 | Medium | 6.3 | 2025-09-17 | A weakness has been identified in SourceCodester Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/posit… |
CVE-2025-10613 | Medium | 6.3 | 2025-09-17 | A vulnerability has been found in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /leveledit1.php. Such ma… |
CVE-2025-10604 | High | 7.3 | 2025-09-17 | A vulnerability was identified in PHPGurukul Online Discussion Forum 1.0. This affects an unknown part of the file /admin/edit_member.php. The manipulation of… |
CVE-2025-10603 | High | 7.3 | 2025-09-17 | A vulnerability was determined in PHPGurukul Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_forum/s… |
CVE-2025-10602 | Medium | 6.3 | 2025-09-17 | A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/dele… |
CVE-2025-10601 | High | 7.3 | 2025-09-17 | A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. Affected is an unknown function of the file /admin/index.php. Such manipulati… |
CVE-2025-10599 | High | 7.3 | 2025-09-17 | A security flaw has been discovered in itsourcecode Web-Based Internet Laboratory Management System 1.0. Impacted is the function User::AuthenticateUser of the… |
CVE-2025-10598 | High | 7.3 | 2025-09-17 | A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This issue affects some unknown processing of the file /admin/search_pro… |
CVE-2025-10597 | High | 7.3 | 2025-09-17 | A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This vulnerability affects unknown code of the f… |
CVE-2025-10596 | High | 7.3 | 2025-09-17 | A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /index.php. The manipulation of the argum… |
CVE-2025-10595 | Medium | 6.3 | 2025-09-17 | A vulnerability has been found in SourceCodester Online Student File Management System 1.0. Affected by this issue is some unknown functionality of the file /a… |
CVE-2025-10594 | Medium | 6.3 | 2025-09-17 | A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admi… |
CVE-2025-10593 | Medium | 6.3 | 2025-09-17 | A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/update_student.php… |
CVE-2025-10592 | Medium | 6.3 | 2025-09-17 | A security vulnerability has been detected in itsourcecode Online Public Access Catalog OPAC 1.0. This impacts an unknown function of the file mysearch.php of… |
CVE-2025-10439 | Critical | 9.8 | 2025-09-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yordam Informatics Yordam Library Automation System allow… |
CVE-2025-10042 | Medium | 5.9 | 2025-09-17 | The Quiz Maker plugin for WordPress is vulnerable to SQL Injection via spoofed IP headers in all versions up to, and including, 6.7.0.56 due to insufficient es… |
CVE-2025-10565 | High | 7.3 | 2025-09-16 | A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /aja… |
CVE-2025-10564 | High | 7.3 | 2025-09-16 | A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=delete_category. Pe… |
CVE-2025-57631 | Critical | 9.8 | 2025-09-16 | SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file upload module |
CVE-2025-10563 | High | 7.3 | 2025-09-16 | A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=save_category… |
CVE-2025-10562 | High | 7.3 | 2025-09-16 | A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=save_product. This man… |
CVE-2024-13174 | High | 8.6 | 2025-09-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E1 Informatics Web Application allows SQL Injection. Thi… |
CVE-2024-13149 | Critical | 9.8 | 2025-09-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor vu… |
CVE-2025-52044 | High | 7.5 | 2025-09-16 | In Frappe ERPNext v15.57.5, the function get_stock_balance() at erpnext/stock/utils.py is vulnerable to SQL Injection, which allows an attacker to extract all… |
CVE-2025-44034 | High | 8.0 | 2025-09-16 | SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the alph parameters in src/main/Java/cn/gson/oasys/… |
CVE-2025-7744 | Critical | 9.8 | 2025-09-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dolusoft Omaspot allows SQL Injection. This issue affect… |
CVE-2024-12913 | High | 8.8 | 2025-09-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Megatek Communication System Azora Wireless Network Manag… |
CVE-2025-4688 | Critical | 9.8 | 2025-09-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL… |
CVE-2025-10483 | Medium | 6.3 | 2025-09-15 | A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admi… |
CVE-2025-10482 | High | 7.3 | 2025-09-15 | A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/index.php. The man… |
CVE-2025-10481 | Medium | 6.3 | 2025-09-15 | A security vulnerability has been detected in SourceCodester Online Student File Management System 1.0. This impacts an unknown function of the file /remove_fi… |
CVE-2025-10479 | High | 7.3 | 2025-09-15 | A security flaw has been discovered in SourceCodester Online Student File Management System 1.0. The impacted element is an unknown function of the file /index… |
CVE-2025-10477 | Medium | 6.3 | 2025-09-15 | A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. The affected element is an unknown function of t… |
CVE-2025-10473 | Medium | 6.3 | 2025-09-15 | A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This impacts the function filterKeyword of the file /com/ruoyi/common/utils/sql/SqlUtil… |
CVE-2025-57104 | Medium | 5.4 | 2025-09-15 | Teampel 5.1.6 is vulnerable to SQL Injection in /Common/login.aspx. |
CVE-2025-59397 | Medium | 5.0 | 2025-09-15 | Open Web Analytics (OWA) before 1.8.1 allows owa_db.php v[value] SQL injection. |
CVE-2025-52048 | Medium | 6.5 | 2025-09-15 | In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function add_tag() at `frappe/desk/doctype/tag/tag.py` is vulnerable to SQL Injection, which… |
CVE-2025-10459 | High | 7.3 | 2025-09-15 | A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/all-appointment.php. Th… |
CVE-2025-10448 | High | 7.3 | 2025-09-15 | A flaw has been found in Campcodes Online Job Finder System 1.0. This affects an unknown function of the file /index.php?q=result&searchfor=bycompany. This man… |
CVE-2025-10446 | High | 7.3 | 2025-09-15 | A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages… |
CVE-2025-10445 | High | 7.3 | 2025-09-15 | A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/us_transac.php?action=a… |
CVE-2025-10444 | High | 7.3 | 2025-09-15 | A security flaw has been discovered in Campcodes Online Job Finder System 1.0. This issue affects some unknown processing of the file /advancesearch.php. Perfo… |
CVE-2025-10436 | High | 7.3 | 2025-09-15 | A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/sup_searchf… |
CVE-2025-10435 | High | 7.3 | 2025-09-15 | A security flaw has been discovered in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/cust_e… |
CVE-2025-10431 | Medium | 6.3 | 2025-09-15 | A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/ajax_represent.php. Such… |
CVE-2025-10430 | Medium | 6.3 | 2025-09-15 | A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/barcode.p… |
CVE-2025-10429 | Medium | 6.3 | 2025-09-15 | A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Affected by this vulnerability is an unknown functionality of the file /ad… |
CVE-2025-10426 | High | 7.3 | 2025-09-15 | A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing m… |
CVE-2025-10421 | Medium | 6.3 | 2025-09-15 | A flaw has been found in SourceCodester Student Grading System 1.0. This vulnerability affects unknown code of the file /update_account.php. Executing manipula… |
CVE-2025-10420 | Medium | 6.3 | 2025-09-15 | A vulnerability was detected in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /form137.php. Performing manipulation of th… |
CVE-2025-10419 | Medium | 6.3 | 2025-09-15 | A security vulnerability has been detected in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /del_… |
CVE-2025-10418 | Medium | 6.3 | 2025-09-15 | A weakness has been identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_stude… |
CVE-2025-10417 | High | 7.3 | 2025-09-15 | A security flaw has been discovered in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=delete_pr… |
CVE-2025-10416 | High | 7.3 | 2025-09-15 | A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=delete_suppli… |
CVE-2025-10415 | High | 7.3 | 2025-09-14 | A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=save_supplier… |
CVE-2025-10414 | High | 7.3 | 2025-09-14 | A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_cu… |
CVE-2025-10413 | High | 7.3 | 2025-09-14 | A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=de… |
CVE-2025-10409 | Medium | 6.3 | 2025-09-14 | A weakness has been identified in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /rms.php?page=users. Executing manipulati… |
CVE-2025-10408 | Medium | 6.3 | 2025-09-14 | A security flaw has been discovered in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /edit_user.p… |
CVE-2025-10407 | Medium | 6.3 | 2025-09-14 | A vulnerability was identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_user… |
CVE-2025-10405 | High | 7.3 | 2025-09-14 | A vulnerability was determined in itsourcecode Baptism Information Management System 1.0. Affected is an unknown function of the file /listbaptism.php. This ma… |
CVE-2025-10404 | High | 7.3 | 2025-09-14 | A vulnerability was found in itsourcecode Baptism Information Management System 1.0. This impacts an unknown function of the file /rptbaptismal.php. The manipu… |
CVE-2025-10403 | High | 7.3 | 2025-09-14 | A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/view-enquiry.php. The ma… |
CVE-2025-10402 | High | 7.3 | 2025-09-14 | A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/readenq.php. Executing… |
CVE-2025-10400 | Medium | 6.3 | 2025-09-14 | A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-m… |
CVE-2025-10399 | Medium | 6.3 | 2025-09-14 | A weakness has been identified in Korzh EasyQuery up to 7.4.0. This issue affects some unknown processing of the file /api/easyquery/models/nwind/fetch of the… |
CVE-2025-10396 | High | 7.3 | 2025-09-14 | A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/… |
CVE-2025-10387 | Medium | 6.3 | 2025-09-14 | A vulnerability was determined in codesiddhant Jasmin Ransomware up to 1.0.1. This vulnerability affects unknown code of the file /handshake.php. This manipula… |
CVE-2025-27240 | High | 7.2 | 2025-09-12 | A Zabbix adminitrator can inject arbitrary SQL during the autoremoval of hosts by inserting malicious SQL in the 'Visible name' field. |
CVE-2025-10266 | Critical | 9.8 | 2025-09-12 | NUP Pro developed by NewType Infortech has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, m… |
CVE-2025-9807 | High | 7.5 | 2025-09-12 | The The Events Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the ‘s’ parameter in all versions up to, and including, 6.15.1 due t… |
CVE-2025-10251 | Medium | 6.3 | 2025-09-11 | A vulnerability was detected in FoxCMS up to 1.24. Affected by this issue is the function batchCope of the file /app/admin/controller/Images.php. The manipulat… |
CVE-2025-40692 | Critical | 9.8 | 2025-09-11 | SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via '… |