CWE-89 · SQL Injection (page 53)
Page 53 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-8270 | High | 7.3 | 2025-07-28 | A vulnerability was found in code-projects Exam Form Submission 1.0. It has been classified as critical. This affects an unknown part of the file /admin/delete… |
CVE-2025-8269 | High | 7.3 | 2025-07-28 | A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fil… |
CVE-2025-8254 | Medium | 6.3 | 2025-07-28 | A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /vi… |
CVE-2025-8253 | High | 7.3 | 2025-07-28 | A vulnerability was found in code-projects Exam Form Submission 1.0. It has been classified as critical. This affects an unknown part of the file /admin/delete… |
CVE-2025-8252 | High | 7.3 | 2025-07-28 | A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fil… |
CVE-2025-8251 | High | 7.3 | 2025-07-28 | A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-8250 | High | 7.3 | 2025-07-28 | A vulnerability, which was classified as critical, was found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/upda… |
CVE-2025-8249 | High | 7.3 | 2025-07-28 | A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the… |
CVE-2025-8248 | High | 7.3 | 2025-07-28 | A vulnerability classified as critical was found in code-projects Online Ordering System 1.0. This vulnerability affects unknown code of the file /signup.php… |
CVE-2025-8247 | Medium | 6.3 | 2025-07-28 | A vulnerability classified as critical has been found in Projectworlds Online Admission System 1.0. This affects an unknown part of the file /admin.php. The ma… |
CVE-2025-8241 | High | 7.3 | 2025-07-27 | A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. This affects an unknown part of the file /repo… |
CVE-2025-8240 | High | 7.3 | 2025-07-27 | A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by this issue is some unknown functionali… |
CVE-2025-8239 | High | 7.3 | 2025-07-27 | A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2025-8238 | High | 7.3 | 2025-07-27 | A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/update_s2.p… |
CVE-2025-8237 | High | 7.3 | 2025-07-27 | A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /adm… |
CVE-2025-8236 | High | 7.3 | 2025-07-27 | A vulnerability was found in code-projects Online Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /a… |
CVE-2025-8235 | High | 7.3 | 2025-07-27 | A vulnerability was found in code-projects Online Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/prod… |
CVE-2025-8234 | High | 7.3 | 2025-07-27 | A vulnerability was found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2025-8233 | High | 7.3 | 2025-07-27 | A vulnerability has been found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2025-8232 | High | 7.3 | 2025-07-27 | A vulnerability, which was classified as critical, was found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/de… |
CVE-2025-8230 | Medium | 6.3 | 2025-07-27 | A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /manage_user.p… |
CVE-2025-8229 | Medium | 6.3 | 2025-07-27 | A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0. This affects an unknown part of the file /parcel_list.php. Th… |
CVE-2025-8220 | High | 7.3 | 2025-07-27 | A vulnerability has been found in Engeman Web up to 12.0.0.2. The affected element is an unknown function of the file /Login/RecoveryPass of the component Pass… |
CVE-2025-8219 | Medium | 6.3 | 2025-07-27 | A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. It has been rated as critical. This issue affects some unknow… |
CVE-2025-8203 | Medium | 6.3 | 2025-07-26 | A vulnerability classified as critical has been found in Jingmen Zeyou Large File Upload Control up to 6.3. Affected is an unknown function of the file /index… |
CVE-2025-8190 | Medium | 6.3 | 2025-07-26 | A vulnerability, which was classified as critical, has been found in Campcodes Courier Management System 1.0. This issue affects some unknown processing of the… |
CVE-2025-8189 | Medium | 6.3 | 2025-07-26 | A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /edit_user.php… |
CVE-2025-8188 | Medium | 6.3 | 2025-07-26 | A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0. This affects an unknown part of the file /edit_staff.php. The… |
CVE-2025-8187 | Medium | 6.3 | 2025-07-26 | A vulnerability was found in Campcodes Courier Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of th… |
CVE-2025-8186 | Medium | 6.3 | 2025-07-26 | A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functional… |
CVE-2025-8185 | High | 7.3 | 2025-07-26 | A vulnerability was found in 1000 Projects ABC Courier Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /… |
CVE-2025-8179 | High | 7.3 | 2025-07-26 | A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown… |
CVE-2024-13507 | High | 7.5 | 2025-07-26 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to time-based SQL Injection via the dist p… |
CVE-2025-8173 | High | 7.3 | 2025-07-25 | A vulnerability has been found in 1000 Projects ABC Courier Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown func… |
CVE-2025-8172 | Medium | 6.3 | 2025-07-25 | A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System 1.0. Affected is an unknown function of the file /admin… |
CVE-2025-8166 | High | 7.3 | 2025-07-25 | A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/i… |
CVE-2025-8165 | Medium | 6.3 | 2025-07-25 | A vulnerability was found in code-projects Food Review System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/app… |
CVE-2025-8164 | Medium | 6.3 | 2025-07-25 | A vulnerability has been found in code-projects Public Chat Room 1.0 and classified as critical. This vulnerability affects unknown code of the file send_messa… |
CVE-2025-8163 | Medium | 6.3 | 2025-07-25 | A vulnerability, which was classified as critical, was found in deerwms deer-wms-2 up to 3.3. This affects an unknown part of the file /system/role/list. The m… |
CVE-2025-8162 | Medium | 6.3 | 2025-07-25 | A vulnerability, which was classified as critical, has been found in deerwms deer-wms-2 up to 3.3. Affected by this issue is some unknown functionality of the… |
CVE-2025-8161 | Medium | 6.3 | 2025-07-25 | A vulnerability classified as critical was found in deerwms deer-wms-2 up to 3.3. Affected by this vulnerability is an unknown functionality of the file /syste… |
CVE-2025-34136 | | 2025-07-25 | An SQL injection vulnerability exists in Commvault 11.32.0 - 11.32.93, 11.36.0 - 11.36.51, and 11.38.0 - 11.38.19 Web Server component that allows a remote, un… | |
CVE-2014-125115 | | 2025-07-25 | An unauthenticated SQL injection vulnerability exists in Pandora FMS version 5.0 SP2 and earlier. The mobile/index.php endpoint fails to properly sanitize user… | |
CVE-2025-44608 | Medium | 6.5 | 2025-07-25 | CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter. |
CVE-2025-8158 | Medium | 6.3 | 2025-07-25 | A vulnerability was found in PHPGurukul Login and User Management System 3.3. It has been declared as critical. This vulnerability affects unknown code of the… |
CVE-2025-8157 | Medium | 6.3 | 2025-07-25 | A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3. It has been classified as critical. This affects an unknown part of… |
CVE-2025-8156 | Medium | 6.3 | 2025-07-25 | A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3 and classified as critical. Affected by this issue is some unknown fu… |
CVE-2025-8135 | Medium | 6.3 | 2025-07-25 | A vulnerability, which was classified as critical, has been found in itsourcecode Insurance Management System 1.0. This issue affects some unknown processing o… |
CVE-2025-8134 | Medium | 6.3 | 2025-07-25 | A vulnerability classified as critical was found in PHPGurukul BP Monitoring Management System 1.0. This vulnerability affects unknown code of the file /bwdate… |
CVE-2025-8127 | Medium | 6.3 | 2025-07-25 | A vulnerability classified as critical was found in deerwms deer-wms-2 up to 3.3. This vulnerability affects unknown code of the file /system/user/list. The ma… |
CVE-2025-8126 | Medium | 6.3 | 2025-07-25 | A vulnerability classified as critical has been found in deerwms deer-wms-2 up to 3.3. This affects an unknown part of the file /system/user/export. The manipu… |
CVE-2025-8125 | Medium | 6.3 | 2025-07-25 | A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sys… |
CVE-2025-8124 | Medium | 6.3 | 2025-07-25 | A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-54379 | Critical | 9.8 | 2025-07-24 | LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there i… |
CVE-2025-32429 | Critical | 9.8 | 2025-07-24 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 t… |
CVE-2025-8123 | Medium | 6.3 | 2025-07-24 | A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. T… |
CVE-2025-4784 | Critical | 9.8 | 2025-07-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Moderec Tourtella allows SQL Injection. This issue affec… |
CVE-2025-4822 | Critical | 9.8 | 2025-07-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bayraktar Solar Energies ScadaWatt Otopilot allows SQL In… |
CVE-2025-54294 | | 2025-07-23 | A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered. The issue allows unprivileged users to execute arbitrary SQL commands. | |
CVE-2025-50127 | | 2025-07-23 | A SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla was discovered. The issue allows privileged users to execute arbitrary SQL commands. | |
CVE-2025-43022 | High | 7.2 | 2025-07-22 | A potential SQL injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow a privileg… |
CVE-2025-51458 | Medium | 6.5 | 2025-07-22 | SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crafted input passed… |
CVE-2025-8018 | Medium | 6.3 | 2025-07-22 | A vulnerability was found in code-projects Food Ordering Review System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown func… |
CVE-2025-4285 | Critical | 10.0 | 2025-07-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rolantis Information Technologies Agentis allows SQL Inje… |
CVE-2025-7950 | High | 7.3 | 2025-07-22 | A vulnerability was found in code-projects Public Chat Room 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the fil… |
CVE-2025-7936 | Medium | 6.3 | 2025-07-21 | A vulnerability has been found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a and classified as critical. Affected by this vulnera… |
CVE-2025-7935 | Medium | 6.3 | 2025-07-21 | A vulnerability, which was classified as critical, was found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a. Affected is the funct… |
CVE-2025-7934 | Medium | 6.3 | 2025-07-21 | A vulnerability, which was classified as critical, has been found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a. This issue affec… |
CVE-2025-7933 | High | 7.3 | 2025-07-21 | A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/settin… |
CVE-2025-7930 | High | 7.3 | 2025-07-21 | A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functiona… |
CVE-2025-7929 | High | 7.3 | 2025-07-21 | A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /members… |
CVE-2025-7928 | High | 7.3 | 2025-07-21 | A vulnerability was found in code-projects Church Donation System 1.0 and classified as critical. This issue affects some unknown processing of the file /membe… |
CVE-2025-7927 | Medium | 6.3 | 2025-07-21 | A vulnerability has been found in PHPGurukul Online Banquet Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2025-7624 | Critical | 9.8 | 2025-07-21 | An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to remote code executio… |
CVE-2024-13973 | Medium | 6.8 | 2025-07-21 | A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to administrators achieving a… |
CVE-2025-41678 | Medium | 6.5 | 2025-07-21 | A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL state… |
CVE-2025-7343 | Critical | 9.8 | 2025-07-21 | The SFT developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and… |
CVE-2025-7918 | Critical | 9.8 | 2025-07-21 | WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL com… |
CVE-2025-7915 | High | 7.3 | 2025-07-21 | A vulnerability was found in Chanjet CRM 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mail/mailinactive.ph… |
CVE-2025-7905 | Medium | 6.3 | 2025-07-20 | A vulnerability has been found in itsourcecode Insurance Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2025-7904 | Medium | 6.3 | 2025-07-20 | A vulnerability, which was classified as critical, was found in itsourcecode Insurance Management System 1.0. This affects an unknown part of the file /insertN… |
CVE-2025-7894 | Medium | 6.3 | 2025-07-20 | A vulnerability, which was classified as critical, has been found in Onyx up to 0.29.1. This issue affects the function generate_simple_sql of the file backend… |
CVE-2025-7888 | Medium | 6.3 | 2025-07-20 | A vulnerability was found in TDuckCloud tduck-platform 5.1 and classified as critical. This issue affects the function UserFormDataMapper of the file src/main/… |
CVE-2025-7886 | High | 7.3 | 2025-07-20 | A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. This affec… |
CVE-2025-7873 | Medium | 6.3 | 2025-07-20 | A vulnerability was found in Metasoft 美特软件 MetaCRM up to 6.4.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-7861 | High | 7.3 | 2025-07-20 | A vulnerability, which was classified as critical, was found in code-projects Church Donation System 1.0. Affected is an unknown function of the file /members/… |
CVE-2025-7860 | High | 7.3 | 2025-07-20 | A vulnerability, which was classified as critical, has been found in code-projects Church Donation System 1.0. This issue affects some unknown processing of th… |
CVE-2025-7859 | High | 7.3 | 2025-07-20 | A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects unknown code of the file /members/upda… |
CVE-2025-7838 | High | 7.3 | 2025-07-19 | A vulnerability has been found in Campcodes Online Movie Theater Seat Reservation System 1.0 and classified as critical. This vulnerability affects unknown cod… |
CVE-2025-7833 | High | 7.3 | 2025-07-19 | A vulnerability, which was classified as critical, has been found in code-projects Church Donation System 1.0. This issue affects some unknown processing of th… |
CVE-2025-7832 | High | 7.3 | 2025-07-19 | A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects unknown code of the file /members/offe… |
CVE-2025-7831 | High | 7.3 | 2025-07-19 | A vulnerability classified as critical has been found in code-projects Church Donation System 1.0. This affects an unknown part of the file /members/Tithes.php… |
CVE-2025-7830 | High | 7.3 | 2025-07-19 | A vulnerability was found in code-projects Church Donation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of t… |
CVE-2025-7829 | High | 7.3 | 2025-07-19 | A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functiona… |
CVE-2025-52924 | Medium | 4.0 | 2025-07-19 | In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on the value of an untrusted X-RequestId HTTP request header. |
CVE-2025-7814 | High | 7.3 | 2025-07-18 | A vulnerability classified as critical was found in code-projects Food Ordering Review System 1.0. This vulnerability affects unknown code of the file /pages/s… |
CVE-2025-7801 | High | 7.3 | 2025-07-18 | A vulnerability has been found in BossSoft CRM 6.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /crm/modu… |
CVE-2025-7798 | Medium | 6.3 | 2025-07-18 | A vulnerability classified as critical has been found in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System up to 8.2. This affec… |
CVE-2025-50585 | High | 8.8 | 2025-07-18 | StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl. |
CVE-2025-54079 | High | 8.8 | 2025-07-18 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versio… |