CWE-89 · SQL Injection (page 48)
Page 48 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-7218 | High | 7.3 | 2025-07-09 | A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.p… |
CVE-2025-7217 | High | 7.3 | 2025-07-09 | A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax… |
CVE-2025-7212 | Medium | 6.3 | 2025-07-09 | A vulnerability was found in itsourcecode Insurance Management System up to 1.0. It has been rated as critical. This issue affects some unknown processing of t… |
CVE-2025-7211 | High | 7.3 | 2025-07-09 | A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cart_add… |
CVE-2025-7200 | Medium | 6.3 | 2025-07-08 | A vulnerability, which was classified as critical, was found in krishna9772 Pharmacy Management System up to a2efc8442931ec9308f3b4cf4778e5701153f4e5. Affected… |
CVE-2025-7199 | High | 7.3 | 2025-07-08 | A vulnerability, which was classified as critical, has been found in code-projects Library System 1.0. This issue affects some unknown processing of the file /… |
CVE-2025-7198 | High | 7.3 | 2025-07-08 | A vulnerability classified as critical was found in code-projects Jonnys Liquor 1.0. This vulnerability affects unknown code of the file /admin/admin-area.php… |
CVE-2025-7197 | High | 7.3 | 2025-07-08 | A vulnerability classified as critical has been found in code-projects Jonnys Liquor 1.0. This affects an unknown part of the file /admin/delete-row.php. The m… |
CVE-2025-7196 | High | 7.3 | 2025-07-08 | A vulnerability was found in code-projects Jonnys Liquor 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /… |
CVE-2025-7193 | High | 7.3 | 2025-07-08 | A vulnerability was found in itsourcecode Agri-Trading Online Shopping System up to 1.0. It has been classified as critical. Affected is an unknown function of… |
CVE-2025-7191 | High | 7.3 | 2025-07-08 | A vulnerability has been found in code-projects Student Enrollment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /… |
CVE-2025-7189 | Medium | 6.3 | 2025-07-08 | A vulnerability, which was classified as critical, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the… |
CVE-2025-7188 | Medium | 6.3 | 2025-07-08 | A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /user… |
CVE-2025-7187 | Medium | 6.3 | 2025-07-08 | A vulnerability classified as critical has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /user/fetch_member.php. The… |
CVE-2025-7186 | Medium | 6.3 | 2025-07-08 | A vulnerability was found in code-projects Chat System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /user/fetch_c… |
CVE-2025-47178 | High | 8.0 | 2025-07-08 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to execut… |
CVE-2025-7185 | High | 7.3 | 2025-07-08 | A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /approve.p… |
CVE-2025-7184 | High | 7.3 | 2025-07-08 | A vulnerability was found in code-projects Library System 1.0. It has been classified as critical. This affects an unknown part of the file /user/teacher/books… |
CVE-2025-7183 | High | 7.3 | 2025-07-08 | A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2025-7037 | High | 7.2 | 2025-07-08 | SQL injection in Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a remote authenticated attacker with admin privileges to… |
CVE-2025-29267 | Medium | 6.5 | 2025-07-08 | SQL Injection vulnerability in Abis, Inc Adjutant Core Accounting ERP build v.PreBeta250F allows a remote attacker to obtain a sensitive information via the ci… |
CVE-2025-24474 | Low | 2.7 | 2025-07-08 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager 7.6.0 through 7.6.1, 7.4.0 throu… |
CVE-2025-7180 | High | 7.3 | 2025-07-08 | A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the fi… |
CVE-2025-7179 | High | 7.3 | 2025-07-08 | A vulnerability classified as critical was found in code-projects Library System 1.0. This vulnerability affects unknown code of the file /add-teacher.php. The… |
CVE-2025-7178 | High | 7.3 | 2025-07-08 | A vulnerability classified as critical has been found in code-projects Food Distributor Site 1.0. This affects an unknown part of the file /admin/login.php. Th… |
CVE-2025-7177 | Medium | 4.7 | 2025-07-08 | A vulnerability was found in PHPGurukul Car Washing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2025-7176 | High | 7.3 | 2025-07-08 | A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown function… |
CVE-2025-40717 | Critical | 9.8 | 2025-07-08 | SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet… |
CVE-2025-40716 | Critical | 9.8 | 2025-07-08 | SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet… |
CVE-2025-40715 | Critical | 9.8 | 2025-07-08 | SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet… |
CVE-2025-40714 | Critical | 9.8 | 2025-07-08 | SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet… |
CVE-2025-40713 | Critical | 9.8 | 2025-07-08 | SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet… |
CVE-2025-40712 | Critical | 9.8 | 2025-07-08 | SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet… |
CVE-2025-40711 | Critical | 9.8 | 2025-07-08 | SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet… |
CVE-2025-7174 | High | 7.3 | 2025-07-08 | A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknown processing of the file /teacher-issue… |
CVE-2025-40735 | High | 8.8 | 2025-07-08 | A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected devices are vulnerable to SQL injection. This could allow an unauthenticat… |
CVE-2025-7173 | High | 7.3 | 2025-07-08 | A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-student… |
CVE-2025-7172 | High | 7.3 | 2025-07-08 | A vulnerability, which was classified as critical, was found in code-projects Crime Reporting System 1.0. This affects an unknown part of the file /headlogin.p… |
CVE-2025-7171 | High | 7.3 | 2025-07-08 | A vulnerability, which was classified as critical, has been found in code-projects Crime Reporting System 1.0. Affected by this issue is some unknown functiona… |
CVE-2025-7170 | High | 7.3 | 2025-07-08 | A vulnerability classified as critical was found in code-projects Crime Reporting System 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-7169 | High | 7.3 | 2025-07-08 | A vulnerability classified as critical has been found in code-projects Crime Reporting System 1.0. Affected is an unknown function of the file /complainer_page… |
CVE-2025-7168 | High | 7.3 | 2025-07-08 | A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /u… |
CVE-2025-7167 | Medium | 6.3 | 2025-07-08 | A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cat… |
CVE-2025-7166 | Medium | 6.3 | 2025-07-08 | A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been classified as critical. This affects an unknown part of the file /single.php… |
CVE-2025-7165 | High | 7.3 | 2025-07-08 | A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functiona… |
CVE-2025-7164 | High | 7.3 | 2025-07-08 | A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknow… |
CVE-2025-7163 | Medium | 6.3 | 2025-07-08 | A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/add-an… |
CVE-2025-7162 | Medium | 6.3 | 2025-07-08 | A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the fi… |
CVE-2025-7161 | Medium | 6.3 | 2025-07-08 | A vulnerability classified as critical was found in PHPGurukul Zoo Management System 2.1. This vulnerability affects unknown code of the file /admin/add-normal… |
CVE-2025-7160 | High | 7.3 | 2025-07-08 | A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. This affects an unknown part of the file /admin/index.php. The m… |
CVE-2025-7159 | Medium | 6.3 | 2025-07-08 | A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2025-7158 | Medium | 6.3 | 2025-07-08 | A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-7157 | High | 7.3 | 2025-07-08 | A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php… |
CVE-2025-7156 | Medium | 6.3 | 2025-07-08 | A vulnerability has been found in hitsz-ids airda 0.0.3 and classified as critical. This vulnerability affects the function execute of the file /v1/chat/comple… |
CVE-2025-7155 | High | 7.3 | 2025-07-08 | A vulnerability, which was classified as critical, was found in PHPGurukul Online Notes Sharing System 1.0. This affects an unknown part of the file /Dashboard… |
CVE-2025-7150 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2025-7149 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/c… |
CVE-2025-7147 | High | 7.3 | 2025-07-07 | A vulnerability has been found in CodeAstro Patient Record Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown funct… |
CVE-2025-7138 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the… |
CVE-2025-7137 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pan… |
CVE-2025-7136 | High | 7.3 | 2025-07-07 | A vulnerability, which was classified as critical, was found in Campcodes Online Recruitment Management System 1.0. Affected is an unknown function of the file… |
CVE-2025-53529 | Critical | 9.8 | 2025-07-07 | WeGIA is a web manager for charitable institutions. An SQL Injection vulnerability was identified in the /html/funcionario/profile_funcionario.php endpoint. Th… |
CVE-2025-53527 | Critical | 9.8 | 2025-07-07 | WeGIA is a web manager for charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in the almox parameter of the /controle/relat… |
CVE-2025-7135 | High | 7.3 | 2025-07-07 | A vulnerability, which was classified as critical, has been found in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown proces… |
CVE-2025-7134 | High | 7.3 | 2025-07-07 | A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /ad… |
CVE-2025-45065 | Critical | 9.8 | 2025-07-07 | employee record management system in php and mysql v1 was discovered to contain a SQL injection vulnerability via the loginerms.php endpoint. |
CVE-2025-7132 | High | 7.3 | 2025-07-07 | A vulnerability was found in Campcodes Payroll Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of th… |
CVE-2025-7131 | High | 7.3 | 2025-07-07 | A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functional… |
CVE-2025-7130 | High | 7.3 | 2025-07-07 | A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php… |
CVE-2025-7129 | High | 7.3 | 2025-07-07 | A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.p… |
CVE-2025-7128 | High | 7.3 | 2025-07-07 | A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax… |
CVE-2025-7127 | Medium | 4.7 | 2025-07-07 | A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This affects an unknown part of the file /ad… |
CVE-2025-7126 | Medium | 6.3 | 2025-07-07 | A vulnerability, which was classified as critical, has been found in itsourcecode Employee Management System up to 1.0. Affected by this issue is some unknown… |
CVE-2025-7125 | Medium | 6.3 | 2025-07-07 | A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0. Affected by this vulnerability is an unknown functionali… |
CVE-2025-7123 | Medium | 4.7 | 2025-07-07 | A vulnerability was found in Campcodes Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /… |
CVE-2025-7122 | High | 7.3 | 2025-07-07 | A vulnerability was found in Campcodes Complaint Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /… |
CVE-2025-7121 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in Campcodes Complaint Management System 1.0. It has been classified as critical. This affects an unknown part of the file /users/com… |
CVE-2025-7120 | High | 7.3 | 2025-07-07 | A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2025-7119 | High | 7.3 | 2025-07-07 | A vulnerability has been found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functional… |
CVE-2025-7102 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in BoyunCMS up to 1.4.20. It has been declared as critical. This vulnerability affects unknown code of the file application/update/co… |
CVE-2025-52833 | Critical | 9.3 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in designthemes LMS lms allows SQL Injection.This issue affe… |
CVE-2025-52832 | Critical | 9.3 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpo-HR NGG Smart Image Search ngg-smart-image-search allo… |
CVE-2025-52831 | Critical | 9.3 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in thanhtungtnt Video List Manager video-list-manager allows… |
CVE-2025-52830 | Critical | 9.3 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bSecure – Your Universal Checkout bSecure – Your Universa… |
CVE-2025-49870 | High | 7.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscrip… |
CVE-2025-32297 | High | 8.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quantumcloud Simple Link Directory qc-simple-link-directo… |
CVE-2025-28983 | Critical | 9.8 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickandPledge Click & Pledge Connect allows Privilege Es… |
CVE-2025-24780 | High | 8.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in printcart Printcart Web to Print Product Designer for Woo… |
CVE-2025-30979 | High | 8.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Pixelating image slideshow gallery pixelating-im… |
CVE-2025-30969 | High | 8.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus iFrame Images Gallery wp-iframe-images-gallery a… |
CVE-2025-30947 | High | 8.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Cool fade popup cool-fade-popup allows Blind SQL… |
CVE-2025-28969 | High | 8.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cybio Gallery Widget gallery-widget allows SQL Injection… |
CVE-2025-28967 | High | 8.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Truman Contact Us page - Contact people LITE contac… |
CVE-2025-6783 | High | 7.5 | 2025-07-04 | The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the emdedSc() function in all versions up to, and including… |
CVE-2025-6782 | High | 7.5 | 2025-07-04 | The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the dirGZActiveForm() function in all versions up to, and i… |
CVE-2025-6739 | Medium | 6.5 | 2025-07-04 | The WPQuiz plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'wpquiz' shortcode in all versions up to, and including, 0.4.2 due… |
CVE-2025-45809 | Medium | 5.4 | 2025-07-03 | SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key… |
CVE-2025-1708 | High | 8.6 | 2025-07-03 | The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its content. |
CVE-2025-6437 | High | 7.5 | 2025-07-02 | The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the ‘oid’ parameter in all versions up… |
CVE-2025-5339 | High | 7.5 | 2025-07-02 | The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘bsa_pro_id’ parameter… |