CWE-89 · SQL Injection (page 61)
Page 61 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-5431 | Medium | 6.3 | 2025-06-02 | A vulnerability, which was classified as critical, was found in AssamLook CMS 1.0. Affected is an unknown function of the file /department-profile.php. The man… |
CVE-2025-3951 | Medium | 4.1 | 2025-06-02 | The WP-Optimize WordPress plugin before 4.2.0 does not properly escape user input when checking image compression statuses, which could allow users with the a… |
CVE-2025-5430 | Medium | 6.3 | 2025-06-02 | A vulnerability, which was classified as critical, has been found in AssamLook CMS 1.0. This issue affects some unknown processing of the file /product.php. Th… |
CVE-2025-5403 | Medium | 6.3 | 2025-06-01 | A vulnerability classified as critical has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This affects an unknown part of… |
CVE-2025-5402 | High | 7.3 | 2025-06-01 | A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been rated as critical. Affected by this issue is so… |
CVE-2025-5401 | High | 7.3 | 2025-06-01 | A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been declared as critical. Affected by this vulnerab… |
CVE-2025-5400 | High | 7.3 | 2025-06-01 | A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been classified as critical. Affected is an unknown… |
CVE-2025-5388 | Medium | 6.3 | 2025-05-31 | A vulnerability classified as critical was found in JeeWMS up to 20250504. Affected by this vulnerability is the function dogenerate of the file /generateContr… |
CVE-2025-5386 | Medium | 6.3 | 2025-05-31 | A vulnerability was found in JeeWMS up to 20250504. It has been rated as critical. This issue affects the function transEditor of the file /cgformTransControll… |
CVE-2025-5384 | Medium | 6.3 | 2025-05-31 | A vulnerability was found in JeeWMS up to 20250504. It has been classified as critical. This affects the function CgAutoListController of the file /cgAutoListC… |
CVE-2025-5376 | High | 7.3 | 2025-05-31 | A vulnerability was found in SourceCodester Health Center Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerabilit… |
CVE-2025-5375 | Medium | 6.3 | 2025-05-31 | A vulnerability was found in PHPGurukul HPGurukul Online Birth Certificate System 2.0. It has been classified as critical. Affected is an unknown function of t… |
CVE-2025-5374 | Medium | 6.3 | 2025-05-31 | A vulnerability was found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This issue affects some unknown processing of the file… |
CVE-2025-5373 | Medium | 6.3 | 2025-05-31 | A vulnerability has been found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This vulnerability affects unknown code of the fil… |
CVE-2025-5371 | High | 7.3 | 2025-05-31 | A vulnerability, which was classified as critical, has been found in SourceCodester Health Center Patient Record Management System 1.0. Affected by this issue… |
CVE-2025-5370 | High | 7.3 | 2025-05-31 | A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. Affected by this vulnerability is an unknown functionality of the file /admin/f… |
CVE-2025-5369 | High | 7.3 | 2025-05-31 | A vulnerability classified as critical has been found in SourceCodester PHP Display Username After Login 1.0. Affected is an unknown function of the file /logi… |
CVE-2025-5368 | Medium | 6.3 | 2025-05-31 | A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2025-5367 | High | 7.3 | 2025-05-31 | A vulnerability was found in PHPGurukul Online Shopping Portal Project 1.0. It has been declared as critical. This vulnerability affects unknown code of the fi… |
CVE-2025-5365 | High | 7.3 | 2025-05-31 | A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file /adm… |
CVE-2025-5364 | High | 7.3 | 2025-05-30 | A vulnerability was found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality o… |
CVE-2025-5363 | High | 7.3 | 2025-05-30 | A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown func… |
CVE-2025-5362 | High | 7.3 | 2025-05-30 | A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /a… |
CVE-2025-5361 | High | 7.3 | 2025-05-30 | A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. This issue affects some unknown processin… |
CVE-2025-5360 | High | 7.3 | 2025-05-30 | A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /book-… |
CVE-2025-48949 | Critical | 9.8 | 2025-05-30 | Navidrome is an open source web-based music collection server and streamer. Versions 0.55.0 through 0.55.2 have a vulnerability due to improper input validatio… |
CVE-2025-5359 | High | 7.3 | 2025-05-30 | A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /appointment… |
CVE-2025-5358 | High | 7.3 | 2025-05-30 | A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. It has been rated as critical. Affected by this issue is some unknown funct… |
CVE-2025-48912 | Medium | 6.5 | 2025-05-30 | An authenticated malicious actor using specially crafted requests could bypass row level security configuration by injecting SQL into 'sqlExpression' fields. T… |
CVE-2025-5332 | High | 7.3 | 2025-05-29 | A vulnerability was found in 1000 Projects Online Notice Board 1.0 and classified as critical. This issue affects some unknown processing of the file /index.ph… |
CVE-2025-5298 | High | 7.3 | 2025-05-28 | A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /a… |
CVE-2025-5287 | High | 7.5 | 2025-05-28 | The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to i… |
CVE-2025-5252 | High | 7.3 | 2025-05-27 | A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/e… |
CVE-2025-5251 | High | 7.3 | 2025-05-27 | A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been classified as critical. This affects an unknown part of the file /admin/edit-subca… |
CVE-2025-5250 | High | 7.3 | 2025-05-27 | A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /a… |
CVE-2025-5249 | High | 7.3 | 2025-05-27 | A vulnerability has been found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-5248 | High | 7.3 | 2025-05-27 | A vulnerability, which was classified as critical, was found in PHPGurukul Company Visitor Management System 1.0. Affected is an unknown function of the file /… |
CVE-2025-5246 | High | 7.3 | 2025-05-27 | A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /hms/a… |
CVE-2025-5232 | Medium | 4.7 | 2025-05-27 | A vulnerability, which was classified as critical, has been found in PHPGurukul Student Study Center Management System 1.0. This issue affects some unknown pro… |
CVE-2025-5231 | High | 7.3 | 2025-05-27 | A vulnerability classified as critical was found in PHPGurukul Company Visitor Management System 1.0. This vulnerability affects unknown code of the file /forg… |
CVE-2025-5230 | High | 7.3 | 2025-05-27 | A vulnerability classified as critical has been found in PHPGurukul Online Nurse Hiring System 1.0. This affects an unknown part of the file /admin/bwdates-rep… |
CVE-2025-5229 | High | 7.3 | 2025-05-27 | A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionali… |
CVE-2025-5227 | High | 7.3 | 2025-05-27 | A vulnerability was found in PHPGurukul Small CRM 3.0 and classified as critical. This issue affects some unknown processing of the file /admin/manage-tickets… |
CVE-2025-5226 | High | 7.3 | 2025-05-27 | A vulnerability has been found in PHPGurukul Small CRM 3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/change-passwo… |
CVE-2025-5225 | High | 7.3 | 2025-05-27 | A vulnerability, which was classified as critical, was found in Campcodes Advanced Online Voting System 1.0. This affects an unknown part of the file /index.ph… |
CVE-2025-5224 | High | 7.3 | 2025-05-27 | A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/ad… |
CVE-2025-48743 | Medium | 5.3 | 2025-05-27 | SIGB PMB before 8.0.1.2 allows SQL injection. |
CVE-2025-5216 | High | 7.3 | 2025-05-27 | A vulnerability classified as critical was found in PHPGurukul Student Record System 3.20. This vulnerability affects unknown code of the file /login.php. The… |
CVE-2025-5214 | High | 7.3 | 2025-05-27 | A vulnerability was found in Kashipara Responsive Online Learing Platform 1.0. It has been rated as critical. Affected by this issue is some unknown functional… |
CVE-2025-5213 | High | 7.3 | 2025-05-27 | A vulnerability was found in projectworlds Responsive E-Learning System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown fun… |
CVE-2025-5212 | High | 7.3 | 2025-05-26 | A vulnerability was found in PHPGurukul Employee Record Management System 1.3. It has been classified as critical. Affected is an unknown function of the file… |
CVE-2025-5211 | High | 7.3 | 2025-05-26 | A vulnerability was found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This issue affects some unknown processing of the fil… |
CVE-2025-5210 | High | 7.3 | 2025-05-26 | A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vulnerability affects unknown code of the f… |
CVE-2025-5208 | High | 7.3 | 2025-05-26 | A vulnerability, which was classified as critical, was found in SourceCodester Online Hospital Management System 1.0. This affects an unknown part of the file… |
CVE-2025-5207 | Medium | 4.7 | 2025-05-26 | A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unkno… |
CVE-2025-5206 | Medium | 4.7 | 2025-05-26 | A vulnerability classified as critical was found in Pixelimity 1.0. Affected by this vulnerability is an unknown functionality of the file /install/index.php o… |
CVE-2025-5205 | High | 7.3 | 2025-05-26 | A vulnerability classified as critical has been found in 1000 Projects Daily College Class Work Report Book 1.0. Affected is an unknown function of the file /d… |
CVE-2025-40666 | Critical | 9.8 | 2025-05-26 | Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update and delete databases through ArbolID par… |
CVE-2025-40665 | Critical | 9.8 | 2025-05-26 | Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update and delete databases through ArbolID par… |
CVE-2025-5176 | High | 7.3 | 2025-05-26 | A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been declared as critical. This vulnerability affects unknown code of… |
CVE-2025-5172 | High | 7.3 | 2025-05-26 | A vulnerability, which was classified as critical, was found in Econtrata up to 20250516. Affected is an unknown function of the file /valida. The manipulation… |
CVE-2025-5170 | Medium | 6.3 | 2025-05-26 | A vulnerability classified as critical was found in llisoft MTA Maita Training System 4.5. This vulnerability affects the function AdminShitiListRequestVo of t… |
CVE-2025-5155 | Medium | 6.3 | 2025-05-25 | A vulnerability has been found in qianfox FoxCMS 1.2.5 and classified as critical. Affected by this vulnerability is the function batchCope of the file app/adm… |
CVE-2025-5152 | Medium | 6.3 | 2025-05-25 | A vulnerability classified as critical was found in Chanjet CRM up to 20250510. This vulnerability affects unknown code of the file /activity/newActivityedit.p… |
CVE-2025-5128 | High | 7.3 | 2025-05-24 | A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected is an unknown function of the file /adm… |
CVE-2025-5119 | High | 7.3 | 2025-05-23 | A vulnerability has been found in Emlog Pro 2.5.11 and classified as critical. This vulnerability affects unknown code of the file /include/controller/api_cont… |
CVE-2025-48735 | Medium | 4.3 | 2025-05-23 | A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2_220219 before 21.45.8.2.3_230220 allows remote attackers to obtain s… |
CVE-2024-51102 | Medium | 4.4 | 2025-05-23 | PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/login.php via… |
CVE-2024-51103 | Medium | 6.5 | 2025-05-23 | PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/password-recov… |
CVE-2024-51101 | Critical | 9.8 | 2025-05-23 | PHPGURUKUL Restaurant Table Booking System using PHP and MySQL v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /rt… |
CVE-2025-5107 | Medium | 6.3 | 2025-05-23 | A vulnerability was found in Fujian Kelixun 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /app/xml_cdr/xml_cdr_det… |
CVE-2025-48283 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Majestic Support Majestic Support majestic-support allows… |
CVE-2025-47671 | High | 7.6 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LETSCMS MLM Software Binary MLM Plan binary-mlm-plan allo… |
CVE-2025-47640 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in printcart Printcart Web to Print Product Designer for Woo… |
CVE-2025-47599 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in facturante Facturante facturante allows SQL Injection.Thi… |
CVE-2025-47575 | High | 8.5 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla School Management allows SQL Injection. This iss… |
CVE-2025-47478 | High | 8.5 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-a… |
CVE-2025-46539 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFable Fable Extra fable-extra allows Blind SQL Injectio… |
CVE-2025-46463 | High | 8.5 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group all… |
CVE-2025-46460 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Detheme Easy Guide wp-easy-guide allows SQL Injection.Thi… |
CVE-2025-46455 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IndigoThemes WP HRM LITE wp-hrm-lite-human-resource-manag… |
CVE-2025-41377 | | 2025-05-23 | A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated… | |
CVE-2025-39504 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GoodLayers Goodlayers Hotel gdlr-hotel allows Blind SQL I… |
CVE-2025-39501 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GoodLayers Goodlayers Hostel gdlr-hostel allows Blind SQL… |
CVE-2025-31914 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autores… |
CVE-2025-31397 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in smartcms Bus Ticket Booking with Seat Reservation for Woo… |
CVE-2025-31056 | Critical | 9.3 | 2025-05-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Techspawn WhatsCart - Whatsapp Abandoned Cart Recovery, O… |
CVE-2025-41407 | High | 8.3 | 2025-05-23 | Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report. |
CVE-2025-3893 | | 2025-05-23 | While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this action. Input provided by the the user i… | |
CVE-2025-36527 | High | 8.3 | 2025-05-23 | Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports. |
CVE-2025-48701 | Medium | 5.4 | 2025-05-23 | openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used. |
CVE-2024-13955 | High | 8.8 | 2025-05-22 | 2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if administrator credentials become comprom… |
CVE-2024-52874 | High | 8.8 | 2025-05-22 | In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks. |
CVE-2025-5081 | High | 7.3 | 2025-05-22 | A vulnerability classified as critical was found in Campcodes Cybercafe Management System 1.0. Affected by this vulnerability is an unknown functionality of th… |
CVE-2025-5079 | High | 7.3 | 2025-05-22 | A flaw has been found in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/updateo… |
CVE-2025-32814 | Critical | 9.8 | 2025-05-22 | An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur. |
CVE-2025-5078 | High | 7.3 | 2025-05-22 | A vulnerability was detected in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the file /admin/subcategory.php. Performing… |
CVE-2025-5077 | High | 7.3 | 2025-05-22 | A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been classified as critical. This affects an unknown part of the file /admin/edit-sub… |
CVE-2025-41403 | High | 8.3 | 2025-05-22 | Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data. |
CVE-2025-3836 | High | 8.3 | 2025-05-22 | Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report. |