CWE-89 · SQL Injection (page 54)
Page 54 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-5206 | Medium | 4.7 | 2025-05-26 | A vulnerability classified as critical was found in Pixelimity 1.0. Affected by this vulnerability is an unknown functionality of the file /install/index.php o… |
CVE-2025-5205 | High | 7.3 | 2025-05-26 | A vulnerability classified as critical has been found in 1000 Projects Daily College Class Work Report Book 1.0. Affected is an unknown function of the file /d… |
CVE-2025-40666 | Critical | 9.8 | 2025-05-26 | Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update and delete databases through ArbolID par… |
CVE-2025-40665 | Critical | 9.8 | 2025-05-26 | Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update and delete databases through ArbolID par… |
CVE-2025-5176 | High | 7.3 | 2025-05-26 | A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been declared as critical. This vulnerability affects unknown code of… |
CVE-2025-5172 | High | 7.3 | 2025-05-26 | A vulnerability, which was classified as critical, was found in Econtrata up to 20250516. Affected is an unknown function of the file /valida. The manipulation… |
CVE-2025-5170 | Medium | 6.3 | 2025-05-26 | A vulnerability classified as critical was found in llisoft MTA Maita Training System 4.5. This vulnerability affects the function AdminShitiListRequestVo of t… |
CVE-2025-5155 | Medium | 6.3 | 2025-05-25 | A vulnerability has been found in qianfox FoxCMS 1.2.5 and classified as critical. Affected by this vulnerability is the function batchCope of the file app/adm… |
CVE-2025-5152 | Medium | 6.3 | 2025-05-25 | A vulnerability classified as critical was found in Chanjet CRM up to 20250510. This vulnerability affects unknown code of the file /activity/newActivityedit.p… |
CVE-2025-5128 | High | 7.3 | 2025-05-24 | A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected is an unknown function of the file /adm… |
CVE-2025-5119 | High | 7.3 | 2025-05-23 | A vulnerability has been found in Emlog Pro 2.5.11 and classified as critical. This vulnerability affects unknown code of the file /include/controller/api_cont… |
CVE-2025-48735 | Medium | 4.3 | 2025-05-23 | A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2_220219 before 21.45.8.2.3_230220 allows remote attackers to obtain s… |
CVE-2024-51102 | Medium | 4.4 | 2025-05-23 | PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/login.php via… |
CVE-2024-51103 | Medium | 6.5 | 2025-05-23 | PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/password-recov… |
CVE-2024-51101 | Critical | 9.8 | 2025-05-23 | PHPGURUKUL Restaurant Table Booking System using PHP and MySQL v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /rt… |
CVE-2025-5107 | Medium | 6.3 | 2025-05-23 | A vulnerability was found in Fujian Kelixun 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /app/xml_cdr/xml_cdr_det… |
CVE-2025-48283 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Majestic Support Majestic Support majestic-support allows… |
CVE-2025-47671 | High | 7.6 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LETSCMS MLM Software Binary MLM Plan binary-mlm-plan allo… |
CVE-2025-47640 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in printcart Printcart Web to Print Product Designer for Woo… |
CVE-2025-47599 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in facturante Facturante facturante allows SQL Injection.Thi… |
CVE-2025-47575 | High | 8.5 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla School Management allows SQL Injection. This iss… |
CVE-2025-47478 | High | 8.5 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-a… |
CVE-2025-46539 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFable Fable Extra fable-extra allows Blind SQL Injectio… |
CVE-2025-46463 | High | 8.5 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group all… |
CVE-2025-46460 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Detheme Easy Guide wp-easy-guide allows SQL Injection.Thi… |
CVE-2025-46455 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IndigoThemes WP HRM LITE wp-hrm-lite-human-resource-manag… |
CVE-2025-41377 | | 2025-05-23 | A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated… | |
CVE-2025-39504 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GoodLayers Goodlayers Hotel gdlr-hotel allows Blind SQL I… |
CVE-2025-39501 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GoodLayers Goodlayers Hostel gdlr-hostel allows Blind SQL… |
CVE-2025-31914 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autores… |
CVE-2025-31397 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in smartcms Bus Ticket Booking with Seat Reservation for Woo… |
CVE-2025-31056 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Techspawn WhatsCart - Whatsapp Abandoned Cart Recovery, O… |
CVE-2025-41407 | High | 8.3 | 2025-05-23 | Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report. |
CVE-2025-3893 | | 2025-05-23 | While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this action. Input provided by the the user i… | |
CVE-2025-36527 | High | 8.3 | 2025-05-23 | Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports. |
CVE-2025-48701 | Medium | 5.4 | 2025-05-23 | openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used. |
CVE-2024-13955 | High | 8.8 | 2025-05-22 | 2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if administrator credentials become comprom… |
CVE-2024-52874 | High | 8.8 | 2025-05-22 | In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks. |
CVE-2025-5081 | High | 7.3 | 2025-05-22 | A vulnerability classified as critical was found in Campcodes Cybercafe Management System 1.0. Affected by this vulnerability is an unknown functionality of th… |
CVE-2025-5079 | High | 7.3 | 2025-05-22 | A flaw has been found in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/updateo… |
CVE-2025-32814 | Critical | 9.8 | 2025-05-22 | An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur. |
CVE-2025-5078 | High | 7.3 | 2025-05-22 | A vulnerability was detected in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the file /admin/subcategory.php. Performing… |
CVE-2025-5077 | High | 7.3 | 2025-05-22 | A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been classified as critical. This affects an unknown part of the file /admin/edit-sub… |
CVE-2025-41403 | High | 8.3 | 2025-05-22 | Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data. |
CVE-2025-3836 | High | 8.3 | 2025-05-22 | Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report. |
CVE-2025-5057 | High | 7.3 | 2025-05-21 | A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2025-5056 | High | 7.3 | 2025-05-21 | A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-3751 | | 2025-05-21 | The component listed above contains a vulnerability that can be exploited by an attacker to perform a SQL Injection attack. This could lead to unauthorised acc… | |
CVE-2025-5032 | High | 7.3 | 2025-05-21 | A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the file /admin/edit-category… |
CVE-2025-5008 | High | 7.3 | 2025-05-20 | A vulnerability was found in projectworlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2025-5006 | High | 7.3 | 2025-05-20 | A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/categ… |
CVE-2025-5004 | High | 7.3 | 2025-05-20 | A vulnerability was found in projectworlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /… |
CVE-2025-5003 | High | 7.3 | 2025-05-20 | A vulnerability has been found in projectworlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2025-5002 | High | 7.3 | 2025-05-20 | A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file… |
CVE-2025-26086 | High | 7.5 | 2025-05-20 | An unauthenticated blind SQL injection vulnerability exists in RSI Queue Management System v3.0 within the TaskID parameter of the get request handler. Attacke… |
CVE-2025-40635 | | 2025-05-20 | SQL injection vulnerability in Comerzzia Backoffice: Sales Orchestrator 3.0.15. This vulnerability allows an attacker to retrieve, create, update and delete da… | |
CVE-2025-39395 | Critical | 9.3 | 2025-05-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPAMS apartment-management allows SQL Injection… |
CVE-2025-39389 | Critical | 9.3 | 2025-05-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solid Plugins AnalyticsWP allows SQL Injection.This issue… |
CVE-2025-39386 | Critical | 9.3 | 2025-05-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla Hospital Management System hospital-management a… |
CVE-2025-39357 | High | 8.5 | 2025-05-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla Hospital Management System hospital-management a… |
CVE-2025-39355 | High | 8.5 | 2025-05-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp FAT Services Booking fat-services-booking allows… |
CVE-2025-32924 | High | 8.5 | 2025-05-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp Revy revy allows SQL Injection.This issue affects… |
CVE-2025-39445 | Critical | 9.3 | 2025-05-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp allows… |
CVE-2025-39403 | High | 8.5 | 2025-05-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPAMS apartment-management allows SQL Injection… |
CVE-2025-43833 | High | 7.6 | 2025-05-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Amir Helzer Absolute Links absolute-links allows Blind SQ… |
CVE-2025-4941 | High | 7.3 | 2025-05-19 | A vulnerability, which was classified as critical, was found in PHPGurukul Credit Card Application Management System 1.0. Affected is an unknown function of th… |
CVE-2025-4940 | High | 7.3 | 2025-05-19 | A vulnerability, which was classified as critical, has been found in 1000 Projects Daily College Class Work Report Book 1.0. This issue affects some unknown pr… |
CVE-2025-39370 | High | 7.6 | 2025-05-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cnilsson iCafe Library icafe-library allows SQL Injection… |
CVE-2025-4938 | Medium | 6.3 | 2025-05-19 | A vulnerability was found in PHPGurukul Employee Record Management System 1.3. It has been rated as critical. Affected by this issue is some unknown functional… |
CVE-2025-4937 | High | 7.3 | 2025-05-19 | A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unk… |
CVE-2025-4936 | High | 7.3 | 2025-05-19 | A vulnerability was found in projectworlds Online Food Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /ad… |
CVE-2025-48280 | High | 7.6 | 2025-05-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia AutomatorWP automatorwp allows Blind SQL Inj… |
CVE-2025-48278 | High | 8.5 | 2025-05-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.Thi… |
CVE-2025-4935 | High | 7.3 | 2025-05-19 | A vulnerability was found in SourceCodester Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /php… |
CVE-2025-4934 | High | 7.3 | 2025-05-19 | A vulnerability has been found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. This vulnerability affects un… |
CVE-2025-4933 | Medium | 6.3 | 2025-05-19 | A vulnerability, which was classified as critical, was found in ponaravindb Hospital-Management-System 1.0. This affects an unknown part of the file /doctor-pa… |
CVE-2025-4932 | High | 7.3 | 2025-05-19 | A vulnerability, which was classified as critical, has been found in projectworlds Online Lawyer Management System 1.0. Affected by this issue is some unknown… |
CVE-2025-4931 | High | 7.3 | 2025-05-19 | A vulnerability classified as critical was found in projectworlds Online Lawyer Management System 1.0. Affected by this vulnerability is an unknown functionali… |
CVE-2025-4930 | High | 7.3 | 2025-05-19 | A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the file /my-cart.php. The ma… |
CVE-2025-4929 | High | 7.3 | 2025-05-19 | A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file /my-ac… |
CVE-2025-4928 | High | 7.3 | 2025-05-19 | A vulnerability was found in projectworlds Online Lawyer Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of th… |
CVE-2025-4927 | High | 7.3 | 2025-05-19 | A vulnerability was found in PHPGurukul Online Marriage Registration System 1.0. It has been classified as critical. This affects an unknown part of the file /… |
CVE-2025-4925 | High | 7.3 | 2025-05-19 | A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1 and classified as critical. Affected by this vulnerability is an unknown function… |
CVE-2025-4924 | High | 7.3 | 2025-05-19 | A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the fi… |
CVE-2025-4917 | High | 7.3 | 2025-05-19 | A vulnerability classified as critical has been found in PHPGurukul Auto Taxi Stand Management System 1.0. Affected is an unknown function of the file /admin/n… |
CVE-2025-4916 | High | 7.3 | 2025-05-19 | A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the… |
CVE-2025-4915 | High | 7.3 | 2025-05-19 | A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the… |
CVE-2025-4914 | High | 7.3 | 2025-05-19 | A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ad… |
CVE-2025-4913 | High | 7.3 | 2025-05-19 | A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2025-4911 | High | 7.3 | 2025-05-19 | A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/view-f… |
CVE-2025-4910 | High | 7.3 | 2025-05-19 | A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the fi… |
CVE-2025-4908 | High | 7.3 | 2025-05-19 | A vulnerability classified as critical has been found in PHPGurukul Daily Expense Tracker System 1.1. This affects an unknown part of the file /expense-datewis… |
CVE-2025-4907 | High | 7.3 | 2025-05-19 | A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality o… |
CVE-2025-4906 | High | 7.3 | 2025-05-19 | A vulnerability was found in PHPGurukul Notice Board System 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. Th… |
CVE-2025-4900 | High | 7.3 | 2025-05-18 | A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/payment.p… |
CVE-2025-4899 | High | 7.3 | 2025-05-18 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /p… |
CVE-2025-4895 | High | 7.3 | 2025-05-18 | A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing… |
CVE-2025-4886 | High | 7.3 | 2025-05-18 | A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-4885 | High | 7.3 | 2025-05-18 | A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/produc… |
CVE-2025-4884 | High | 7.3 | 2025-05-18 | A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the fi… |