CWE-89 · SQL Injection (page 49)
Page 49 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-9831 | High | 7.3 | 2025-09-02 | A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. This impacts an unknown function of the file /admin/edit-services.php. This… |
CVE-2025-9830 | High | 7.3 | 2025-09-02 | A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/add-customer-servic… |
CVE-2025-9829 | High | 7.3 | 2025-09-02 | A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /signup.php. The man… |
CVE-2025-55476 | Medium | 6.5 | 2025-09-02 | FireShare FileShare 1.2.25 contains a time-based blind SQL injection vulnerability in the sort parameter of the endpoint: GET /api/videos/public?sort= This par… |
CVE-2025-50565 | Medium | 6.5 | 2025-09-02 | Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initiated by an attacker. |
CVE-2025-55472 | Medium | 6.5 | 2025-09-02 | SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerability arises due to unsafe handling of use… |
CVE-2025-57140 | Critical | 9.8 | 2025-09-02 | rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path. |
CVE-2025-9814 | High | 7.3 | 2025-09-02 | A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of the file /admin/contact-us.php. The… |
CVE-2025-9811 | High | 7.3 | 2025-09-02 | A vulnerability was found in Campcodes Farm Management System 1.0. This affects an unknown part of the file /reviewInput.php. Performing manipulation of the ar… |
CVE-2025-9802 | Medium | 4.7 | 2025-09-02 | A vulnerability was detected in RemoteClinic 2.0. This vulnerability affects unknown code of the file /staff/profile.php. The manipulation of the argument ID r… |
CVE-2025-9794 | High | 7.3 | 2025-09-01 | A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/pos_transac.php?acti… |
CVE-2025-9793 | High | 7.3 | 2025-09-01 | A vulnerability was detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /setting/admin.php of the component S… |
CVE-2025-9792 | High | 7.3 | 2025-09-01 | A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /e_dashboard… |
CVE-2025-9790 | High | 7.3 | 2025-09-01 | A security flaw has been discovered in SourceCodester Hotel Reservation System 1.0. This affects an unknown part of the file /admin/updateabout.php. The manipu… |
CVE-2025-9789 | High | 7.3 | 2025-09-01 | A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /admin/e… |
CVE-2025-9788 | High | 7.3 | 2025-09-01 | A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-9786 | High | 7.3 | 2025-09-01 | A vulnerability was found in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /teacher_signup.php. Performing manip… |
CVE-2025-9771 | High | 7.3 | 2025-09-01 | A security vulnerability has been detected in SourceCodester Eye Clinic Management System 1.0. Affected by this issue is some unknown functionality of the file… |
CVE-2025-9770 | High | 7.3 | 2025-09-01 | A weakness has been identified in Campcodes Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ of t… |
CVE-2025-9768 | Medium | 6.3 | 2025-09-01 | A vulnerability was identified in itsourcecode Sports Management System 1.0. This impacts an unknown function of the file /Admin/mode.php. The manipulation of… |
CVE-2025-9767 | High | 7.3 | 2025-09-01 | A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /Admin/sporttype.php. Executing manip… |
CVE-2025-9766 | High | 7.3 | 2025-09-01 | A vulnerability was found in itsourcecode Sports Management System 1.0. The impacted element is an unknown function of the file /Admin/facilitator.php. Perform… |
CVE-2025-9765 | High | 7.3 | 2025-09-01 | A vulnerability has been found in itsourcecode Sports Management System 1.0. The affected element is an unknown function of the file /Admin/tournament_details… |
CVE-2025-9764 | High | 7.3 | 2025-09-01 | A flaw has been found in itsourcecode Sports Management System 1.0. Impacted is an unknown function of the file /Admin/resultdetails.php. This manipulation of… |
CVE-2025-9763 | High | 7.3 | 2025-09-01 | A vulnerability was detected in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /student_signup.php. Th… |
CVE-2025-9761 | High | 7.3 | 2025-09-01 | A security vulnerability has been detected in Campcodes Online Feeds Product Inventory System 1.0. This vulnerability affects unknown code of the file /feeds/i… |
CVE-2025-9759 | High | 7.3 | 2025-09-01 | A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is the function Signup of the file /ajax… |
CVE-2025-9758 | Medium | 6.3 | 2025-09-01 | A vulnerability was identified in deepakmisal24 Chemical Inventory Management System up to 1.0. Affected by this vulnerability is an unknown functionality of t… |
CVE-2025-9757 | High | 7.3 | 2025-09-01 | A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0. Affected is the function Login of the file /ajax.php. This manipulati… |
CVE-2025-9756 | Medium | 6.3 | 2025-09-01 | A vulnerability was found in PHPGurukul User Management System 1.0. This impacts an unknown function of the file /admin/change-emailid.php. The manipulation of… |
CVE-2025-9751 | High | 7.3 | 2025-09-01 | A weakness has been identified in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /login.php. This mani… |
CVE-2025-9750 | High | 7.3 | 2025-08-31 | A security flaw has been discovered in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php. T… |
CVE-2025-9749 | High | 7.3 | 2025-08-31 | A vulnerability was identified in HKritesh009 Grocery List Management Web App up to f491b681eb70d465f445c9a721415c965190f83b. This affects an unknown part of t… |
CVE-2025-9744 | High | 7.3 | 2025-08-31 | A weakness has been identified in Campcodes Online Loan Management System 1.0. The affected element is an unknown function of the file /ajax.php?action=login… |
CVE-2025-9743 | High | 7.3 | 2025-08-31 | A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. Impacted is an unknown function of the file login_attendance2.php. P… |
CVE-2025-9742 | High | 7.3 | 2025-08-31 | A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue affects some unknown processing of the file /login.php. Such m… |
CVE-2025-9741 | High | 7.3 | 2025-08-31 | A vulnerability was determined in code-projects Human Resource Integrated System 1.0. This vulnerability affects unknown code of the file /login_query12.php. T… |
CVE-2025-9740 | High | 7.3 | 2025-08-31 | A vulnerability was found in code-projects Human Resource Integrated System 1.0. This affects an unknown part of the file /log_query.php. The manipulation of t… |
CVE-2025-9739 | High | 7.3 | 2025-08-31 | A vulnerability has been found in Campcodes Online Water Billing System 1.0. Affected by this issue is some unknown functionality of the file /process.php. The… |
CVE-2025-9733 | High | 7.3 | 2025-08-31 | A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. This impacts an unknown function of the file /login_timeee.php. Perf… |
CVE-2025-9730 | High | 7.3 | 2025-08-31 | A vulnerability was found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /ajax/updateProfile.php. The… |
CVE-2025-9729 | High | 7.3 | 2025-08-31 | A vulnerability was detected in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /admin/student-registration.php… |
CVE-2025-9726 | High | 7.3 | 2025-08-31 | A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /review.php… |
CVE-2025-9706 | High | 7.3 | 2025-08-30 | A security vulnerability has been detected in SourceCodester Water Billing System 1.0. Affected by this vulnerability is an unknown functionality of the file /… |
CVE-2025-9705 | High | 7.3 | 2025-08-30 | A weakness has been identified in SourceCodester Water Billing System 1.0. Affected is an unknown function of the file /paybill.php. This manipulation of the a… |
CVE-2025-9704 | High | 7.3 | 2025-08-30 | A security flaw has been discovered in SourceCodester Water Billing System 1.0. This impacts an unknown function of the file /viewbill.php. The manipulation of… |
CVE-2025-9702 | High | 7.3 | 2025-08-30 | A vulnerability was identified in SourceCodester Simple Cafe Billing System 1.0. This affects an unknown function of the file /sales_report.php. The manipulati… |
CVE-2025-9701 | High | 7.3 | 2025-08-30 | A vulnerability was determined in SourceCodester Simple Cafe Billing System 1.0. The impacted element is an unknown function of the file /receipt.php. Executin… |
CVE-2025-9700 | High | 7.3 | 2025-08-30 | A flaw has been found in SourceCodester Online Book Store 1.0. This issue affects some unknown processing of the file /publisher_list.php. This manipulation of… |
CVE-2025-9699 | High | 7.3 | 2025-08-30 | A vulnerability was detected in SourceCodester Online Polling System Code 1.0. This vulnerability affects unknown code of the file /admin/checklogin.php. The m… |
CVE-2025-9694 | High | 7.3 | 2025-08-30 | A vulnerability was determined in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/lo… |
CVE-2025-9692 | High | 7.3 | 2025-08-30 | A vulnerability was found in Campcodes Online Shopping System 1.0. Affected is an unknown function of the file /product.php. Performing manipulation of the arg… |
CVE-2025-9691 | High | 7.3 | 2025-08-30 | A vulnerability has been found in Campcodes Online Shopping System 1.0. This impacts an unknown function of the file /login.php. Such manipulation of the argum… |
CVE-2025-9690 | Medium | 6.3 | 2025-08-30 | A flaw has been found in SourceCodester Advanced School Management System 1.0. This affects an unknown function of the file /index.php/stock/vendordetails. Thi… |
CVE-2025-9689 | Medium | 6.3 | 2025-08-30 | A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/… |
CVE-2025-0165 | High | 7.6 | 2025-08-30 | IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 is vulnerable to SQL injection. A remote attacker could send… |
CVE-2025-9686 | Medium | 6.3 | 2025-08-30 | A security flaw has been discovered in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /module/AreaConhecimento/edit of… |
CVE-2025-9685 | Medium | 6.3 | 2025-08-30 | A vulnerability was identified in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/AreaConhecimento/view of the comp… |
CVE-2025-9684 | Medium | 6.3 | 2025-08-30 | A vulnerability was determined in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/FormulaMedia/edit of the component Formula d… |
CVE-2025-9679 | High | 7.3 | 2025-08-30 | A security vulnerability has been detected in itsourcecode Student Information System 1.0. This affects an unknown function of the file /course_edit1.php. Such… |
CVE-2025-54946 | Critical | 9.8 | 2025-08-30 | A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands. |
CVE-2025-9678 | High | 7.3 | 2025-08-29 | A weakness has been identified in Campcodes Online Loan Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=delete_… |
CVE-2025-9669 | High | 7.3 | 2025-08-29 | A vulnerability has been found in Jinher OA 1.0. This issue affects some unknown processing of the file GetTreeDate.aspx. The manipulation of the argument ID l… |
CVE-2025-9667 | Medium | 6.3 | 2025-08-29 | A vulnerability was detected in code-projects Simple Grading System 1.0. This affects an unknown part of the file /delete_account.php of the component Admin Pa… |
CVE-2025-9666 | Medium | 6.3 | 2025-08-29 | A security vulnerability has been detected in code-projects Simple Grading System 1.0. Affected by this issue is some unknown functionality of the file /delete… |
CVE-2025-9665 | Medium | 6.3 | 2025-08-29 | A weakness has been identified in code-projects Simple Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_student… |
CVE-2025-44033 | Critical | 9.8 | 2025-08-29 | SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector() method declaration in src/main/ja… |
CVE-2025-29894 | High | 8.8 | 2025-08-29 | An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to… |
CVE-2025-29893 | High | 8.8 | 2025-08-29 | An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to… |
CVE-2025-9664 | Medium | 6.3 | 2025-08-29 | A security flaw has been discovered in code-projects Simple Grading System 1.0. Affected is an unknown function of the file /add_student_grade.php of the compo… |
CVE-2025-9663 | Medium | 6.3 | 2025-08-29 | A vulnerability was identified in code-projects Simple Grading System 1.0. This impacts an unknown function of the file /edit_account.php of the component Admi… |
CVE-2025-9662 | High | 7.3 | 2025-08-29 | A vulnerability was determined in code-projects Simple Grading System 1.0. This affects an unknown function of the file /login.php of the component Admin Panel… |
CVE-2025-9660 | High | 7.3 | 2025-08-29 | A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. The impacted element is an unknown function of the file /passwordrecover.php… |
CVE-2025-9651 | Medium | 6.3 | 2025-08-29 | A vulnerability was found in shafhasan chatbox up to 156a39cde62f78532c3265a70eda12c70907e56f. This impacts an unknown function of the file /chat.php. The mani… |
CVE-2025-9645 | High | 7.3 | 2025-08-29 | A vulnerability was identified in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /t_dashboard/r_all_info.php. The manip… |
CVE-2025-9644 | High | 7.3 | 2025-08-29 | A vulnerability was determined in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/bill_… |
CVE-2025-9643 | High | 7.3 | 2025-08-29 | A vulnerability was found in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/util… |
CVE-2025-9441 | Medium | 6.5 | 2025-08-29 | The iATS Online Forms plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order' parameter in all versions up to, and including, 1.2 due to… |
CVE-2025-9610 | High | 7.3 | 2025-08-29 | A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /create_account.php. Th… |
CVE-2025-8858 | High | 7.5 | 2025-08-29 | Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read… |
CVE-2025-9608 | Medium | 6.3 | 2025-08-29 | A vulnerability has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/FormulaMedia/view of the component Formula d… |
CVE-2025-9607 | Medium | 6.3 | 2025-08-29 | A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /module/TabelaArredondamento/view of… |
CVE-2025-9606 | Medium | 6.3 | 2025-08-29 | A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/agenda_prefere… |
CVE-2025-9601 | High | 7.3 | 2025-08-29 | A vulnerability was detected in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /setting/employee_salary_setup.php. The… |
CVE-2025-9600 | High | 7.3 | 2025-08-29 | A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /s… |
CVE-2025-9599 | High | 7.3 | 2025-08-29 | A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting… |
CVE-2025-9598 | High | 7.3 | 2025-08-29 | A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of the file /setting/year_setup.php. Perfo… |
CVE-2025-9597 | High | 7.3 | 2025-08-29 | A vulnerability was identified in itsourcecode Apartment Management System 1.0. This impacts an unknown function of the file /o_dashboard/rented_all_info.php… |
CVE-2025-9596 | High | 7.3 | 2025-08-29 | A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /login.php. This manipulation of the… |
CVE-2025-9594 | High | 7.3 | 2025-08-28 | A vulnerability has been found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /report/complain_info.p… |
CVE-2025-9593 | High | 7.3 | 2025-08-28 | A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unit_status_info.php. Executing mani… |
CVE-2025-9592 | High | 7.3 | 2025-08-28 | A vulnerability was detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/bill_info.php. Per… |
CVE-2025-57819 | Critical | 9.8 | 2025-08-28 | FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied dat… |
CVE-2025-51972 | Medium | 6.5 | 2025-08-28 | A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input… |
CVE-2025-51971 | Medium | 5.4 | 2025-08-28 | A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Unsanitized user input in th… |
CVE-2025-51969 | Medium | 6.5 | 2025-08-28 | A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online Shopping System Advanced 1.0. This flaw is present in the product_id GET… |
CVE-2025-51968 | Medium | 6.5 | 2025-08-28 | A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize u… |
CVE-2025-54720 | Critical | 9.3 | 2025-08-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SteelThemes Nest Addons nest-addons allows SQL Injection… |
CVE-2025-49404 | High | 8.5 | 2025-08-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in purethemes Listeo Core listeo-core allows SQL Injection.T… |
CVE-2025-49402 | High | 8.5 | 2025-08-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in scriptsbundle Exertio Framework exertio-framework allows… |