CWE-89 · SQL Injection (page 54)
Page 54 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-49485 | | 2025-07-18 | A SQL injection vulnerability in the Balbooa Forms plugin 1.0.0-2.3.1.1 for Joomla allows privileged users to execute arbitrary SQL commands via the 'id' param… | |
CVE-2025-49484 | | 2025-07-18 | A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows low-privilege users to execute arbitrary SQL commands via the 'cvid'… | |
CVE-2025-26855 | Critical | 9.8 | 2025-07-18 | A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands. |
CVE-2025-26854 | Critical | 9.8 | 2025-07-18 | A SQL injection in Articles Good Search extension 1.0.0 - 1.2.4.0011 for Joomla allows attackers to execute arbitrary SQL commands. |
CVE-2025-6717 | Medium | 6.5 | 2025-07-18 | The B1.lt plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 2.2.56 due to insufficient escaping… |
CVE-2025-7638 | Medium | 4.9 | 2025-07-18 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to time-based SQL Injection via the `order_by` param… |
CVE-2025-7765 | High | 7.3 | 2025-07-17 | A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. Affected by this vulnerability is an unknown functiona… |
CVE-2025-7764 | High | 7.3 | 2025-07-17 | A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /admi… |
CVE-2025-7757 | High | 7.3 | 2025-07-17 | A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /… |
CVE-2025-7754 | Medium | 6.3 | 2025-07-17 | A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of t… |
CVE-2025-7753 | High | 7.3 | 2025-07-17 | A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been classified as critical. This affects an unknown part of the file… |
CVE-2025-7752 | High | 7.3 | 2025-07-17 | A vulnerability was found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionali… |
CVE-2025-7751 | High | 7.3 | 2025-07-17 | A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2025-6230 | Medium | 5.3 | 2025-07-17 | A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite c… |
CVE-2025-7750 | High | 7.3 | 2025-07-17 | A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the fil… |
CVE-2025-50240 | Critical | 9.8 | 2025-07-17 | nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteRecycleBin. |
CVE-2025-7749 | High | 7.3 | 2025-07-17 | A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affects some unknown proce… |
CVE-2024-32323 | High | 8.1 | 2025-07-17 | SQL Injection vulnerability in cnhcit.com Haichang OA v.1.0.0 allows a remote attacker to obtain sensitive information via the if parameter in hcit.project.rte… |
CVE-2025-25257 | Critical | 9.8 | 2025-07-17 | An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiWeb 7.6.0 through… |
CVE-2025-54062 | High | 8.8 | 2025-07-17 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versio… |
CVE-2025-54061 | High | 8.8 | 2025-07-17 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versio… |
CVE-2025-54060 | High | 8.8 | 2025-07-17 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versio… |
CVE-2025-54058 | High | 8.8 | 2025-07-17 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versio… |
CVE-2025-53946 | High | 8.8 | 2025-07-17 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versio… |
CVE-2025-7735 | High | 7.5 | 2025-07-17 | The Hospital Information System developed by UNIMAX has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL comman… |
CVE-2025-20272 | Medium | 4.3 | 2025-07-16 | A vulnerability in a subset of REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, low-… |
CVE-2025-53937 | Critical | 9.8 | 2025-07-16 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the `/… |
CVE-2025-37104 | High | 7.1 | 2025-07-16 | A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQ… |
CVE-2025-52819 | High | 8.5 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in pakkemx Pakke Envíos pakke allows SQL Injection.This issu… |
CVE-2025-52714 | Critical | 9.3 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Traveler traveler allows SQL Injection.This is… |
CVE-2025-49876 | High | 8.5 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-a… |
CVE-2025-49034 | High | 7.6 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows SQ… |
CVE-2025-47645 | High | 8.5 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products… |
CVE-2025-32574 | High | 8.5 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPGYM allows SQL Injection. This issue affects W… |
CVE-2025-30936 | Critical | 9.3 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Torod Company for Information Technology Torod torod allo… |
CVE-2025-28982 | Critical | 9.3 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThimPress WP Pipes allows SQL Injection. This issue affec… |
CVE-2025-28959 | Critical | 9.3 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows SQL… |
CVE-2025-24759 | Critical | 9.3 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-Busin… |
CVE-2025-54043 | High | 7.6 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce SMTP for Amazon SES smtp-amazon-ses allows SQ… |
CVE-2025-54026 | High | 8.5 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuanticaLabs GymBase Theme Classes gymbase_classes allows… |
CVE-2025-48301 | High | 7.6 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce SMTP for SendGrid – YaySMTP smtp-sendgrid all… |
CVE-2025-48299 | High | 7.6 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce YayExtra yayextra allows SQL Injection.This i… |
CVE-2025-48161 | High | 7.6 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce YaySMTP smtp-sendinblue allows SQL Injection… |
CVE-2025-40985 | | 2025-07-16 | SQL injection vulnerability in SCATI Vision Web of SCATI Labs from version 4.8 to 7.2. This vulnerability allows an attacker to exfiltrate some data from the d… | |
CVE-2025-26186 | High | 8.1 | 2025-07-15 | SQL Injection vulnerability in openSIS v.9.1 allows a remote attacker to execute arbitrary code via the id parameter in Ajax.php |
CVE-2025-34112 | | 2025-07-15 | An authenticated multi-stage remote code execution vulnerability exists in Riverbed SteelCentral NetProfiler and NetExpress 10.8.7 virtual appliances. A SQL in… | |
CVE-2025-53823 | High | 8.8 | 2025-07-14 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Versions prior to 3.4.5 have a SQL Injection vulnerabi… |
CVE-2025-53639 | Critical | 9.8 | 2025-07-14 | MeterSphere is an open source continuous testing platform. Prior to version 3.6.5-lts, the sortField parameter in certain API endpoints is not properly validat… |
CVE-2025-51660 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Products.php. |
CVE-2025-51659 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Products.php. |
CVE-2025-51658 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_InquiryView.php. |
CVE-2025-51657 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Link.php. |
CVE-2025-51656 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Link.php. |
CVE-2025-51655 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Quanxian.php. |
CVE-2025-51654 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Infocategories.php. |
CVE-2025-51653 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_ct.php. |
CVE-2025-51652 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Categories.php. |
CVE-2025-7612 | High | 7.3 | 2025-07-14 | A vulnerability was found in code-projects Mobile Shop 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /login.php. T… |
CVE-2025-7611 | High | 7.3 | 2025-07-14 | A vulnerability was found in code-projects Wedding Reservation 1.0. It has been classified as critical. This affects an unknown part of the file /global.php. T… |
CVE-2025-7610 | High | 7.3 | 2025-07-14 | A vulnerability was found in code-projects Electricity Billing System 1.0 and classified as critical. Affected by this issue is some unknown functionality of t… |
CVE-2025-7609 | High | 7.3 | 2025-07-14 | A vulnerability has been found in code-projects Simple Shopping Cart 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-7608 | High | 7.3 | 2025-07-14 | A vulnerability, which was classified as critical, was found in code-projects Simple Shopping Cart 1.0. Affected is an unknown function of the file /userlogin… |
CVE-2025-7607 | High | 7.3 | 2025-07-14 | A vulnerability, which was classified as critical, has been found in code-projects Simple Shopping Cart 1.0. This issue affects some unknown processing of the… |
CVE-2025-7606 | High | 7.3 | 2025-07-14 | A vulnerability classified as critical has been found in code-projects AVL Rooms 1.0. This affects an unknown part of the file /city.php. The manipulation of t… |
CVE-2025-7605 | High | 7.3 | 2025-07-14 | A vulnerability was found in code-projects AVL Rooms 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /prof… |
CVE-2025-7604 | High | 7.3 | 2025-07-14 | A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as critical. Affected by this vulnerability is an unknown function… |
CVE-2025-7600 | Medium | 6.3 | 2025-07-14 | A vulnerability, which was classified as critical, was found in PHPGurukul Online Library Management System 3.0. This affects an unknown part of the file /admi… |
CVE-2025-7599 | Medium | 6.3 | 2025-07-14 | A vulnerability, which was classified as critical, has been found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected by this issue is some unknown f… |
CVE-2025-7595 | High | 7.3 | 2025-07-14 | A vulnerability was found in code-projects Job Diary 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /view-cad.php… |
CVE-2025-7594 | High | 7.3 | 2025-07-14 | A vulnerability was found in code-projects Job Diary 1.0. It has been classified as critical. This affects an unknown part of the file /view-emp.php. The manip… |
CVE-2025-7593 | High | 7.3 | 2025-07-14 | A vulnerability was found in code-projects Job Diary 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view-all… |
CVE-2025-7592 | Medium | 6.3 | 2025-07-14 | A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown fun… |
CVE-2025-7591 | Medium | 6.3 | 2025-07-14 | A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected is an unknown function of the file v… |
CVE-2025-7590 | Medium | 6.3 | 2025-07-14 | A vulnerability, which was classified as critical, has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This issue affects some unknown processi… |
CVE-2025-7589 | Medium | 6.3 | 2025-07-14 | A vulnerability classified as critical was found in PHPGurukul Dairy Farm Shop Management System 1.3. This vulnerability affects unknown code of the file edit-… |
CVE-2025-7588 | Medium | 6.3 | 2025-07-14 | A vulnerability classified as critical has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This affects an unknown part of the file edit-produc… |
CVE-2025-7587 | High | 7.3 | 2025-07-14 | A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been rated as critical. Affected by this issue is some unknown functio… |
CVE-2025-7585 | Medium | 6.3 | 2025-07-14 | A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. Affected is an unknown function of the file /admi… |
CVE-2025-7584 | Medium | 6.3 | 2025-07-14 | A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This issue affects some unknown processing of the file /ad… |
CVE-2025-7583 | Medium | 6.3 | 2025-07-14 | A vulnerability has been found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This vulnerability affects unknown code of the file /… |
CVE-2025-7582 | Medium | 6.3 | 2025-07-14 | A vulnerability, which was classified as critical, was found in PHPGurukul Online Fire Reporting System 1.2. This affects an unknown part of the file /admin/as… |
CVE-2025-7581 | Medium | 6.3 | 2025-07-14 | A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of t… |
CVE-2025-7580 | Medium | 6.3 | 2025-07-14 | A vulnerability classified as critical was found in code-projects Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /ad… |
CVE-2025-7568 | Medium | 6.3 | 2025-07-14 | A vulnerability was found in qianfox FoxCMS up to 1.2.5. It has been classified as critical. Affected is the function batchCope of the file app/admin/controlle… |
CVE-2025-7563 | Medium | 6.3 | 2025-07-14 | A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-7562 | Medium | 6.3 | 2025-07-14 | A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of the file /admin/new-re… |
CVE-2025-7561 | Medium | 6.3 | 2025-07-14 | A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2025-7560 | Medium | 6.3 | 2025-07-14 | A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2025-7559 | Medium | 6.3 | 2025-07-14 | A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. This affects an unknown part of the file /admin/b… |
CVE-2025-7558 | Medium | 6.3 | 2025-07-14 | A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admi… |
CVE-2025-7557 | Medium | 6.3 | 2025-07-14 | A vulnerability has been found in code-projects Voting System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-7556 | Medium | 6.3 | 2025-07-14 | A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown function of the file /admin/voters_edit… |
CVE-2025-7555 | Medium | 6.3 | 2025-07-14 | A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /a… |
CVE-2025-1735 | Medium | 5.9 | 2025-07-13 | In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quot… |
CVE-2025-7543 | Medium | 6.3 | 2025-07-13 | A vulnerability was found in PHPGurukul User Registration & Login and User Management System 3.3. It has been classified as critical. This affects an unknown p… |
CVE-2025-7542 | High | 7.3 | 2025-07-13 | A vulnerability was found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. Affected by this issue is some unk… |
CVE-2025-7541 | High | 7.3 | 2025-07-13 | A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2025-7540 | High | 7.3 | 2025-07-13 | A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the fil… |
CVE-2025-7539 | High | 7.3 | 2025-07-13 | A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affects some unknown proce… |
CVE-2025-7537 | High | 7.3 | 2025-07-13 | A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/product_upda… |