CWE-89 · SQL Injection (page 52)
Page 52 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-41530 | Critical | 9.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php. |
CVE-2023-41528 | Critical | 9.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters. |
CVE-2023-41527 | Critical | 9.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php. |
CVE-2023-41526 | Critical | 9.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters. |
CVE-2023-41525 | Critical | 9.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php. |
CVE-2023-41524 | High | 8.8 | 2025-08-07 | Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php. |
CVE-2023-41523 | High | 8.8 | 2025-08-07 | Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress parameter at createClassTeacher.php. |
CVE-2023-41522 | High | 8.8 | 2025-08-07 | Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admis… |
CVE-2023-41521 | High | 8.8 | 2025-08-07 | Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessi… |
CVE-2023-41520 | High | 8.8 | 2025-08-07 | Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmNam… |
CVE-2023-40992 | Medium | 6.5 | 2025-08-07 | Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter. |
CVE-2025-54396 | Medium | 5.4 | 2025-08-07 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection. Authenticated users can exploit this. |
CVE-2025-54788 | High | 8.8 | 2025-08-07 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions and below, the InboundEmail module allows… |
CVE-2025-7036 | High | 7.5 | 2025-08-06 | The CleverReach® WP plugin for WordPress is vulnerable to time-based SQL Injection via the ‘title’ parameter in all versions up to, and including, 1.5.20 due t… |
CVE-2025-6986 | Medium | 6.5 | 2025-08-06 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in all versions up… |
CVE-2025-54865 | High | 7.3 | 2025-08-05 | Tilesheets MediaWiki Extension adds a table lookup parser function for an item and returns the requested image. A missing backtick in a query executed by the T… |
CVE-2025-54119 | Critical | 10.0 | 2025-08-05 | ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. In versions 5.22.9 and below, improper escaping… |
CVE-2025-50341 | Critical | 9.8 | 2025-08-04 | A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the _domain parameter. An attacker can manipulate the SQL query logic and determ… |
CVE-2025-8503 | High | 7.3 | 2025-08-03 | A vulnerability, which was classified as critical, has been found in code-projects Online Medicine Guide 1.0. Affected by this issue is some unknown functional… |
CVE-2025-8502 | High | 7.3 | 2025-08-03 | A vulnerability classified as critical was found in code-projects Online Medicine Guide 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-8500 | Medium | 6.3 | 2025-08-03 | A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been rated as critical. This issue affects some unknown processing of t… |
CVE-2025-8499 | High | 7.3 | 2025-08-03 | A vulnerability was found in code-projects Online Medicine Guide 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cu… |
CVE-2025-8498 | High | 7.3 | 2025-08-03 | A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /cart/index.php. Suc… |
CVE-2025-8497 | High | 7.3 | 2025-08-03 | A weakness has been identified in code-projects Online Medicine Guide 1.0. This affects an unknown part of the file /cusfindphar2.php. This manipulation of the… |
CVE-2025-8496 | High | 7.3 | 2025-08-03 | A vulnerability has been found in projectworlds Online Admission System 1.0 and classified as critical. Affected by this vulnerability is an unknown functional… |
CVE-2025-8495 | High | 7.3 | 2025-08-03 | A vulnerability, which was classified as critical, was found in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the f… |
CVE-2025-8494 | High | 7.3 | 2025-08-03 | A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0. This issue affects some unknown pro… |
CVE-2025-8493 | High | 7.3 | 2025-08-02 | A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. This vulnerability affects unknown code of the file… |
CVE-2025-8471 | High | 7.3 | 2025-08-02 | A vulnerability, which was classified as critical, has been found in projectworlds Online Admission System 1.0. This issue affects some unknown processing of t… |
CVE-2025-8470 | High | 7.3 | 2025-08-02 | A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /ad… |
CVE-2025-8469 | High | 7.3 | 2025-08-02 | A vulnerability classified as critical has been found in SourceCodester Online Hotel Reservation System 1.0. This affects an unknown part of the file /admin/de… |
CVE-2025-8468 | High | 7.3 | 2025-08-02 | A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /… |
CVE-2025-8467 | High | 7.3 | 2025-08-02 | A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of t… |
CVE-2025-8466 | High | 7.3 | 2025-08-02 | A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /forgot_pass… |
CVE-2025-54790 | Medium | 6.5 | 2025-08-02 | Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, Files does not have logic to prevent the exploitation of ba… |
CVE-2013-10044 | High | 8.8 | 2025-08-01 | An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credentials and… |
CVE-2025-50868 | Medium | 6.5 | 2025-08-01 | A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0. The Q4 POST parameter is not properly sanitized before… |
CVE-2025-52390 | Critical | 9.1 | 2025-08-01 | Saurus CMS Community Edition since commit d886e5b0 (2010-04-23) is vulnerable to a SQL Injection vulnerability in the `prepareSearchQuery()` method in `Fulltex… |
CVE-2025-52327 | High | 7.8 | 2025-08-01 | SQL Injection vulnerability in Restaurant Order System 1.0 allows a local attacker to obtain sensitive information via the payment.php file |
CVE-2025-41375 | Critical | 9.8 | 2025-08-01 | SQL Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability allows an attacker to retrieve, create, update and delete database via 'token' par… |
CVE-2025-41374 | High | 8.8 | 2025-08-01 | A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated… |
CVE-2025-41373 | High | 8.8 | 2025-08-01 | A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated… |
CVE-2025-41372 | High | 8.8 | 2025-08-01 | A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated… |
CVE-2025-41371 | High | 8.8 | 2025-08-01 | A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated… |
CVE-2025-41370 | High | 8.8 | 2025-08-01 | A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated… |
CVE-2025-8443 | High | 7.3 | 2025-08-01 | A vulnerability was found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fi… |
CVE-2025-8442 | High | 7.3 | 2025-08-01 | A vulnerability has been found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this vulnerability is an unknown functionalit… |
CVE-2025-8441 | High | 7.3 | 2025-08-01 | A vulnerability, which was classified as critical, was found in code-projects Online Medicine Guide 1.0. Affected is an unknown function of the file /pharsignu… |
CVE-2025-8439 | High | 7.3 | 2025-08-01 | A vulnerability, which was classified as critical, has been found in code-projects Wazifa System 1.0. This issue affects some unknown processing of the file /c… |
CVE-2025-8438 | High | 7.3 | 2025-08-01 | A vulnerability classified as critical was found in code-projects Wazifa System 1.0. This vulnerability affects unknown code of the file /controllers/postpubli… |
CVE-2025-8437 | High | 7.3 | 2025-08-01 | A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. Th… |
CVE-2025-8436 | High | 7.3 | 2025-08-01 | A vulnerability was found in projectworlds Online Admission System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-8431 | High | 7.3 | 2025-08-01 | A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/add… |
CVE-2024-34327 | Medium | 6.5 | 2025-07-31 | Sielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability via the email address field of the password reset form. |
CVE-2025-8409 | High | 7.3 | 2025-07-31 | A vulnerability has been found in code-projects Vehicle Management 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality o… |
CVE-2025-50867 | Medium | 6.5 | 2025-07-31 | A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter is directly embedde… |
CVE-2025-8408 | High | 7.3 | 2025-07-31 | A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. Affected is an unknown function of the file /filter1.php… |
CVE-2014-125123 | | 2025-07-31 | An unauthenticated SQL injection vulnerability exists in the Kloxo web hosting control panel (developed by LXCenter) prior to version 6.1.12. The flaw resides… | |
CVE-2013-10043 | | 2025-07-31 | A vulnerability exists in OAstium VoIP PBX astium-confweb-2.1-25399 and earlier, where improper input validation in the logon.php script allows an attacker to… | |
CVE-2013-10033 | | 2025-07-31 | An unauthenticated SQL injection vulnerability exists in Kimai version 0.9.2.x via the db_restore.php endpoint. The flaw allows attackers to inject arbitrary S… | |
CVE-2025-8407 | High | 7.3 | 2025-07-31 | A vulnerability, which was classified as critical, has been found in code-projects Vehicle Management 1.0. This issue affects some unknown processing of the fi… |
CVE-2025-8382 | Medium | 6.3 | 2025-07-31 | A vulnerability, which was classified as critical, was found in Campcodes Online Hotel Reservation System 1.0. Affected is an unknown function of the file /adm… |
CVE-2025-8381 | Medium | 6.3 | 2025-07-31 | A vulnerability, which was classified as critical, has been found in Campcodes Online Hotel Reservation System 1.0. This issue affects some unknown processing… |
CVE-2025-8378 | High | 7.3 | 2025-07-31 | A vulnerability was found in Campcodes Online Hotel Reservation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2025-8376 | High | 7.3 | 2025-07-31 | A vulnerability classified as critical has been found in code-projects Vehicle Management 1.0. Affected is an unknown function of the file /updatebal.php. The… |
CVE-2025-8375 | High | 7.3 | 2025-07-31 | A vulnerability was found in code-projects Vehicle Management 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addve… |
CVE-2025-8374 | High | 7.3 | 2025-07-31 | A vulnerability was found in code-projects Vehicle Management 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /addco… |
CVE-2025-8373 | High | 7.3 | 2025-07-31 | A vulnerability was found in code-projects Vehicle Management 1.0. It has been classified as critical. This affects an unknown part of the file /print.php. The… |
CVE-2025-8372 | High | 7.3 | 2025-07-31 | A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fil… |
CVE-2025-8371 | High | 7.3 | 2025-07-31 | A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-8347 | Medium | 6.3 | 2025-07-31 | A vulnerability, which was classified as critical, was found in Kehua Charging Pile Cloud Platform 1.0. This affects an unknown part of the file /sys/task/find… |
CVE-2025-8345 | Medium | 6.3 | 2025-07-31 | A vulnerability classified as critical was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this vulnerability is the… |
CVE-2025-8339 | High | 7.3 | 2025-07-31 | A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the fil… |
CVE-2025-8338 | High | 7.3 | 2025-07-31 | A vulnerability was found in projectworlds Online Admission System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2025-8336 | High | 7.3 | 2025-07-30 | A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /ad… |
CVE-2025-8334 | High | 7.3 | 2025-07-30 | A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is some unknown function… |
CVE-2025-8333 | High | 7.3 | 2025-07-30 | A vulnerability was found in code-projects Online Farm System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-8332 | High | 7.3 | 2025-07-30 | A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /register.ph… |
CVE-2025-8331 | High | 7.3 | 2025-07-30 | A vulnerability was found in code-projects Online Farm System 1.0 and classified as critical. This issue affects some unknown processing of the file /forgot_pa… |
CVE-2025-8330 | High | 7.3 | 2025-07-30 | A vulnerability has been found in code-projects Vehicle Management 1.0 and classified as critical. This vulnerability affects unknown code of the file /edit1.p… |
CVE-2025-8329 | High | 7.3 | 2025-07-30 | A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. This affects an unknown part of the file /filter3.php. Th… |
CVE-2025-8328 | High | 7.3 | 2025-07-30 | A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by this issue is some unknown functionali… |
CVE-2025-8327 | High | 7.3 | 2025-07-30 | A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2024-45955 | High | 7.3 | 2025-07-30 | Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter. |
CVE-2025-8326 | High | 7.3 | 2025-07-30 | A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/delete_s7.p… |
CVE-2025-6348 | Medium | 4.9 | 2025-07-30 | The Smart Slider 3 plugin for WordPress is vulnerable to time-based SQL Injection via the ‘sliderid’ parameter in all versions up to, and including, 3.5.1.28 d… |
CVE-2025-45346 | High | 8.1 | 2025-07-29 | SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request. |
CVE-2024-43018 | Medium | 6.4 | 2025-07-29 | Piwigo 13.8.0 and below is vulnerable to SQL Injection in the parameters max_level and min_register. These parameters are used in ws_user_gerList function from… |
CVE-2025-51045 | Medium | 6.5 | 2025-07-29 | Phpgurukul Pre-School Enrollment System 1.0 contains a SQL injection vulnerability in the /admin/password-recovery.php file. This vulnerability is attributed t… |
CVE-2025-51044 | Medium | 6.5 | 2025-07-29 | phpgurukul Nipah virus (NiV) Testing Management System 1.0 contains a SQL injection vulnerability in the /new-user-testing.php file, due to insufficient valida… |
CVE-2025-2928 | High | 7.2 | 2025-07-29 | SQL Injection affecting the Archiver role. |
CVE-2025-51970 | High | 7.7 | 2025-07-29 | A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supp… |
CVE-2025-40682 | Critical | 9.8 | 2025-07-29 | SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the… |
CVE-2025-8264 | Critical | 9.0 | 2025-07-29 | Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inje… |
CVE-2025-6495 | High | 7.5 | 2025-07-29 | The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ‘p’ parameter in all versions up to, and including, 1.12.4 due to insufficient esca… |
CVE-2025-8274 | High | 7.3 | 2025-07-28 | A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functional… |
CVE-2025-8273 | High | 7.3 | 2025-07-28 | A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/update_s8.p… |
CVE-2025-8272 | High | 7.3 | 2025-07-28 | A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /adm… |
CVE-2025-6918 | Critical | 9.8 | 2025-07-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ncvav Virtual PBX Software allows SQL Injection. This is… |
CVE-2025-8271 | High | 7.3 | 2025-07-28 | A vulnerability was found in code-projects Exam Form Submission 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /adm… |