CWE-89 · SQL Injection (page 56)
Page 56 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-7165 | High | 7.3 | 2025-07-08 | A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functiona… |
CVE-2025-7164 | High | 7.3 | 2025-07-08 | A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknow… |
CVE-2025-7163 | Medium | 6.3 | 2025-07-08 | A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/add-an… |
CVE-2025-7162 | Medium | 6.3 | 2025-07-08 | A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the fi… |
CVE-2025-7161 | Medium | 6.3 | 2025-07-08 | A vulnerability classified as critical was found in PHPGurukul Zoo Management System 2.1. This vulnerability affects unknown code of the file /admin/add-normal… |
CVE-2025-7160 | High | 7.3 | 2025-07-08 | A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. This affects an unknown part of the file /admin/index.php. The m… |
CVE-2025-7159 | Medium | 6.3 | 2025-07-08 | A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2025-7158 | Medium | 6.3 | 2025-07-08 | A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-7157 | High | 7.3 | 2025-07-08 | A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php… |
CVE-2025-7156 | Medium | 6.3 | 2025-07-08 | A vulnerability has been found in hitsz-ids airda 0.0.3 and classified as critical. This vulnerability affects the function execute of the file /v1/chat/comple… |
CVE-2025-7155 | High | 7.3 | 2025-07-08 | A vulnerability, which was classified as critical, was found in PHPGurukul Online Notes Sharing System 1.0. This affects an unknown part of the file /Dashboard… |
CVE-2025-7150 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2025-7149 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/c… |
CVE-2025-7147 | High | 7.3 | 2025-07-07 | A vulnerability has been found in CodeAstro Patient Record Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown funct… |
CVE-2025-7138 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the… |
CVE-2025-7137 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pan… |
CVE-2025-7136 | High | 7.3 | 2025-07-07 | A vulnerability, which was classified as critical, was found in Campcodes Online Recruitment Management System 1.0. Affected is an unknown function of the file… |
CVE-2025-53529 | Critical | 9.8 | 2025-07-07 | WeGIA is a web manager for charitable institutions. An SQL Injection vulnerability was identified in the /html/funcionario/profile_funcionario.php endpoint. Th… |
CVE-2025-53527 | Critical | 9.8 | 2025-07-07 | WeGIA is a web manager for charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in the almox parameter of the /controle/relat… |
CVE-2025-7135 | High | 7.3 | 2025-07-07 | A vulnerability, which was classified as critical, has been found in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown proces… |
CVE-2025-7134 | High | 7.3 | 2025-07-07 | A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /ad… |
CVE-2025-45065 | Critical | 9.8 | 2025-07-07 | employee record management system in php and mysql v1 was discovered to contain a SQL injection vulnerability via the loginerms.php endpoint. |
CVE-2025-7132 | High | 7.3 | 2025-07-07 | A vulnerability was found in Campcodes Payroll Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of th… |
CVE-2025-7131 | High | 7.3 | 2025-07-07 | A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functional… |
CVE-2025-7130 | High | 7.3 | 2025-07-07 | A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php… |
CVE-2025-7129 | High | 7.3 | 2025-07-07 | A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.p… |
CVE-2025-7128 | High | 7.3 | 2025-07-07 | A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax… |
CVE-2025-7127 | Medium | 4.7 | 2025-07-07 | A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This affects an unknown part of the file /ad… |
CVE-2025-7126 | Medium | 6.3 | 2025-07-07 | A vulnerability, which was classified as critical, has been found in itsourcecode Employee Management System up to 1.0. Affected by this issue is some unknown… |
CVE-2025-7125 | Medium | 6.3 | 2025-07-07 | A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0. Affected by this vulnerability is an unknown functionali… |
CVE-2025-7123 | Medium | 4.7 | 2025-07-07 | A vulnerability was found in Campcodes Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /… |
CVE-2025-7122 | High | 7.3 | 2025-07-07 | A vulnerability was found in Campcodes Complaint Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /… |
CVE-2025-7121 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in Campcodes Complaint Management System 1.0. It has been classified as critical. This affects an unknown part of the file /users/com… |
CVE-2025-7120 | High | 7.3 | 2025-07-07 | A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2025-7119 | High | 7.3 | 2025-07-07 | A vulnerability has been found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functional… |
CVE-2025-7102 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in BoyunCMS up to 1.4.20. It has been declared as critical. This vulnerability affects unknown code of the file application/update/co… |
CVE-2025-52833 | Critical | 9.3 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in designthemes LMS lms allows SQL Injection.This issue affe… |
CVE-2025-52832 | Critical | 9.3 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpo-HR NGG Smart Image Search ngg-smart-image-search allo… |
CVE-2025-52831 | Critical | 9.3 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in thanhtungtnt Video List Manager video-list-manager allows… |
CVE-2025-52830 | Critical | 9.3 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bSecure – Your Universal Checkout bSecure – Your Universa… |
CVE-2025-49870 | High | 7.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscrip… |
CVE-2025-32297 | High | 8.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quantumcloud Simple Link Directory qc-simple-link-directo… |
CVE-2025-28983 | Critical | 9.8 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickandPledge Click & Pledge Connect allows Privilege Es… |
CVE-2025-24780 | High | 8.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in printcart Printcart Web to Print Product Designer for Woo… |
CVE-2025-30979 | High | 8.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Pixelating image slideshow gallery pixelating-im… |
CVE-2025-30969 | High | 8.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus iFrame Images Gallery wp-iframe-images-gallery a… |
CVE-2025-30947 | High | 8.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Cool fade popup cool-fade-popup allows Blind SQL… |
CVE-2025-28969 | High | 8.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cybio Gallery Widget gallery-widget allows SQL Injection… |
CVE-2025-28967 | High | 8.5 | 2025-07-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Truman Contact Us page - Contact people LITE contac… |
CVE-2025-6783 | High | 7.5 | 2025-07-04 | The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the emdedSc() function in all versions up to, and including… |
CVE-2025-6782 | High | 7.5 | 2025-07-04 | The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the dirGZActiveForm() function in all versions up to, and i… |
CVE-2025-6739 | Medium | 6.5 | 2025-07-04 | The WPQuiz plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'wpquiz' shortcode in all versions up to, and including, 0.4.2 due… |
CVE-2025-45809 | Medium | 5.4 | 2025-07-03 | SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key… |
CVE-2025-1708 | High | 8.6 | 2025-07-03 | The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its content. |
CVE-2025-6437 | High | 7.5 | 2025-07-02 | The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the ‘oid’ parameter in all versions up… |
CVE-2025-5339 | High | 7.5 | 2025-07-02 | The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘bsa_pro_id’ parameter… |
CVE-2025-4381 | High | 7.5 | 2025-07-02 | The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the ‘$id’ variable of the getSpace() f… |
CVE-2025-6963 | High | 7.3 | 2025-07-01 | A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /myp… |
CVE-2025-6962 | High | 7.3 | 2025-07-01 | A vulnerability, which was classified as critical, was found in Campcodes Employee Management System 1.0. This affects an unknown part of the file /myprofileup… |
CVE-2025-6961 | High | 7.3 | 2025-07-01 | A vulnerability, which was classified as critical, has been found in Campcodes Employee Management System 1.0. Affected by this issue is some unknown functiona… |
CVE-2025-6960 | High | 7.3 | 2025-07-01 | A vulnerability classified as critical was found in Campcodes Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-6959 | High | 7.3 | 2025-07-01 | A vulnerability classified as critical has been found in Campcodes Employee Management System 1.0. Affected is an unknown function of the file /eloginwel.php… |
CVE-2025-6958 | High | 7.3 | 2025-07-01 | A vulnerability was found in Campcodes Employee Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /e… |
CVE-2025-6957 | High | 7.3 | 2025-07-01 | A vulnerability was found in Campcodes Employee Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /p… |
CVE-2025-34059 | | 2025-07-01 | An SQL injection vulnerability exists in the Dahua Smart Cloud Gateway Registration Management Platform via the username parameter in the /index.php/User/doLog… | |
CVE-2025-6956 | High | 7.3 | 2025-07-01 | A vulnerability was found in Campcodes Employee Management System 1.0. It has been classified as critical. This affects an unknown part of the file /changepass… |
CVE-2025-6955 | High | 7.3 | 2025-07-01 | A vulnerability was found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2025-6954 | High | 7.3 | 2025-07-01 | A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2025-6938 | High | 7.3 | 2025-07-01 | A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the f… |
CVE-2025-6937 | High | 7.3 | 2025-07-01 | A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the f… |
CVE-2025-6936 | High | 7.3 | 2025-07-01 | A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /addp… |
CVE-2025-6935 | High | 7.3 | 2025-07-01 | A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2025-6930 | Medium | 6.3 | 2025-06-30 | A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/manage-foreig… |
CVE-2025-6929 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. This issue affects some unknown processing of the file /admin… |
CVE-2025-6917 | High | 7.3 | 2025-06-30 | A vulnerability has been found in code-projects Online Hotel Booking 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin… |
CVE-2025-6915 | Medium | 6.3 | 2025-06-30 | A vulnerability, which was classified as critical, has been found in PHPGurukul Student Record System 3.2. Affected by this issue is some unknown functionality… |
CVE-2025-52895 | High | 7.5 | 2025-06-30 | Frappe is a full-stack web application framework. Prior to versions 14.94.3 and 15.58.0, SQL injection could be achieved via a specially crafted request, which… |
CVE-2025-6914 | Medium | 6.3 | 2025-06-30 | A vulnerability classified as critical was found in PHPGurukul Student Record System 3.2. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2025-6913 | Medium | 6.3 | 2025-06-30 | A vulnerability classified as critical has been found in PHPGurukul Student Record System 3.2. Affected is an unknown function of the file /admin-profile.php… |
CVE-2025-6912 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in PHPGurukul Student Record System 3.2. It has been rated as critical. This issue affects some unknown processing of the file /manag… |
CVE-2025-6911 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in PHPGurukul Student Record System 3.2. It has been declared as critical. This vulnerability affects unknown code of the file /manag… |
CVE-2025-6910 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in PHPGurukul Student Record System 3.2. It has been classified as critical. This affects an unknown part of the file /session.php. T… |
CVE-2025-6909 | Medium | 6.3 | 2025-06-30 | A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functi… |
CVE-2025-6908 | Medium | 6.3 | 2025-06-30 | A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /adm… |
CVE-2025-6907 | High | 7.3 | 2025-06-30 | A vulnerability classified as critical was found in code-projects Car Rental System 1.0. This vulnerability affects unknown code of the file /book_car.php. The… |
CVE-2025-6906 | High | 7.3 | 2025-06-30 | A vulnerability classified as critical has been found in code-projects Car Rental System 1.0. This affects an unknown part of the file /login.php. The manipula… |
CVE-2025-6905 | High | 7.3 | 2025-06-30 | A vulnerability, which was classified as critical, has been found in code-projects Car Rental System 1.0. This issue affects some unknown processing of the fil… |
CVE-2025-6904 | High | 7.3 | 2025-06-30 | A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the fi… |
CVE-2025-6903 | High | 7.3 | 2025-06-30 | A vulnerability was found in code-projects Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-6902 | High | 7.3 | 2025-06-30 | A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ph… |
CVE-2025-6901 | High | 7.3 | 2025-06-30 | A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /… |
CVE-2025-40731 | Critical | 9.8 | 2025-06-30 | SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the p… |
CVE-2025-6891 | High | 7.3 | 2025-06-30 | A vulnerability classified as critical has been found in code-projects Inventory Management System 1.0. Affected is an unknown function of the file /php_action… |
CVE-2025-6890 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /t… |
CVE-2025-6889 | High | 7.3 | 2025-06-30 | A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /l… |
CVE-2025-6888 | High | 7.3 | 2025-06-30 | A vulnerability was found in PHPGurukul Teachers Record Management System 2.1. It has been classified as critical. This affects an unknown part of the file /ad… |
CVE-2025-6885 | High | 7.3 | 2025-06-30 | A vulnerability, which was classified as critical, was found in PHPGurukul Teachers Record Management System 2.1. Affected is an unknown function of the file /… |
CVE-2025-6884 | Medium | 6.3 | 2025-06-30 | A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the fi… |
CVE-2025-6883 | Medium | 6.3 | 2025-06-30 | A vulnerability classified as critical was found in code-projects Staff Audit System 1.0. This vulnerability affects unknown code of the file /update_index.php… |
CVE-2025-6880 | Medium | 6.3 | 2025-06-30 | A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/ed… |