CWE-89 · SQL Injection (page 62)
Page 62 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-2831 | Medium | 6.3 | 2025-03-27 | A vulnerability has been found in mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 up to d4836f6b49cd0ac79a4021b15ce99ff7229d4694 and classified as critical. This vul… |
CVE-2025-30217 | High | 7.5 | 2025-03-26 | Frappe is a full-stack web application framework. Prior to versions 14.93.2 and 15.55.0, a SQL Injection vulnerability has been identified in Frappe Framework… |
CVE-2025-30524 | Critical | 9.3 | 2025-03-26 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in origincode Product Catalog displayproduct allows SQL Inje… |
CVE-2025-28942 | Critical | 9.3 | 2025-03-26 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Trust Payments Trust Payments Gateway for WooCommerce tru… |
CVE-2025-28939 | High | 8.5 | 2025-03-26 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in EuroCizia WP Google Calendar Manager wp-gcalendar allows… |
CVE-2025-28898 | Critical | 9.3 | 2025-03-26 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator… |
CVE-2025-28873 | High | 8.5 | 2025-03-26 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Scott Taylor Shuffle shuffle allows Blind SQL Injection.T… |
CVE-2025-26941 | Critical | 9.3 | 2025-03-26 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin allows SQL Injection… |
CVE-2025-28904 | Critical | 9.3 | 2025-03-25 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shamalli Web Directory Free web-directory-free allows Bli… |
CVE-2025-30212 | High | 7.5 | 2025-03-25 | Frappe is a full-stack web application framework. An SQL Injection vulnerability has been identified in Frappe Framework prior to versions 14.89.0 and 15.51.0… |
CVE-2024-42533 | Critical | 9.8 | 2025-03-25 | SQL injection vulnerability in the authentication module in Convivance StandVoice 4.5 through 6.2 allows remote attackers to execute arbitrary code via the GES… |
CVE-2024-53678 | High | 8.8 | 2025-03-25 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache VCL. Users can modify form data submitted when req… |
CVE-2025-2740 | High | 7.3 | 2025-03-25 | A vulnerability classified as critical has been found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/elig… |
CVE-2025-2739 | High | 7.3 | 2025-03-25 | A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the fi… |
CVE-2025-2738 | High | 7.3 | 2025-03-25 | A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the fi… |
CVE-2025-2737 | High | 7.3 | 2025-03-25 | A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin… |
CVE-2024-9770 | Medium | 4.7 | 2025-03-25 | The WP-Recall WordPress plugin before 16.26.12 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL inj… |
CVE-2024-44903 | High | 7.5 | 2025-03-25 | SQL Injection can occur in the SirsiDynix Horizon Information Portal (IPAC20) through 3.25_9382; however, a patch is available from the vendor. This is in ipac… |
CVE-2024-12109 | Medium | 4.1 | 2025-03-25 | The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.9 does not sanitize and escape a parameter before using it in a SQL statement, all… |
CVE-2024-10638 | Medium | 4.1 | 2025-03-25 | The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.11 does not sanitize and escape a parameter before using it in a SQL statement, al… |
CVE-2025-2736 | High | 7.3 | 2025-03-25 | A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-2735 | High | 7.3 | 2025-03-25 | A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functi… |
CVE-2025-2734 | High | 7.3 | 2025-03-25 | A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /adm… |
CVE-2025-30604 | High | 7.6 | 2025-03-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jiangqie JiangQie Official Website Mini Program jiangqie-… |
CVE-2025-30590 | High | 8.5 | 2025-03-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dourou Flickr set slideshows flickr-set-slideshows allows… |
CVE-2025-30571 | High | 7.6 | 2025-03-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in STEdb Corp. STEdb Forms stedb-forms allows SQL Injection… |
CVE-2025-30570 | High | 7.6 | 2025-03-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AliRezaMohammadi دکمه، شبکه اجتماعی خرید dokme allows SQL… |
CVE-2025-30569 | High | 8.5 | 2025-03-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jahertor WP Featured Entries wp-featured-entries allows S… |
CVE-2025-30525 | High | 7.6 | 2025-03-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ProfitShare.ro WP Profitshare wp-profitshare allows SQL I… |
CVE-2025-30523 | High | 7.6 | 2025-03-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Marcel-NL Super Simple Subscriptions super-simple-subscri… |
CVE-2025-2684 | High | 7.3 | 2025-03-24 | A vulnerability, which was classified as critical, has been found in PHPGurukul Bank Locker Management System 1.0. This issue affects some unknown processing o… |
CVE-2025-2683 | High | 7.3 | 2025-03-24 | A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0. This vulnerability affects unknown code of the file /profile… |
CVE-2025-2682 | High | 7.3 | 2025-03-24 | A vulnerability classified as critical has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file /edit-subadmin… |
CVE-2025-2681 | High | 7.3 | 2025-03-24 | A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2025-2680 | High | 7.3 | 2025-03-24 | A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown funct… |
CVE-2025-2679 | High | 7.3 | 2025-03-24 | A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /con… |
CVE-2025-2678 | High | 7.3 | 2025-03-24 | A vulnerability was found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /c… |
CVE-2025-2677 | High | 7.3 | 2025-03-24 | A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2025-2676 | High | 7.3 | 2025-03-24 | A vulnerability, which was classified as critical, was found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file /add-sub… |
CVE-2025-2675 | High | 7.3 | 2025-03-24 | A vulnerability, which was classified as critical, has been found in PHPGurukul Bank Locker Management System 1.0. Affected by this issue is some unknown funct… |
CVE-2025-2674 | High | 7.3 | 2025-03-24 | A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-2672 | Medium | 6.3 | 2025-03-23 | A vulnerability was found in code-projects Payroll Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2025-2665 | High | 7.3 | 2025-03-23 | A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0. It has been classified as critical. This affects an unknown part of the file… |
CVE-2025-2664 | Medium | 4.7 | 2025-03-23 | A vulnerability was found in CodeZips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fi… |
CVE-2025-2663 | High | 7.3 | 2025-03-23 | A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functio… |
CVE-2025-2662 | Medium | 6.3 | 2025-03-23 | A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been classified as critical. Affected is an unknown function of the file st… |
CVE-2025-2661 | High | 7.3 | 2025-03-23 | A vulnerability was found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file… |
CVE-2025-2660 | High | 7.3 | 2025-03-23 | A vulnerability has been found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the fil… |
CVE-2025-2659 | High | 7.3 | 2025-03-23 | A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /stude… |
CVE-2025-2658 | High | 7.3 | 2025-03-23 | A vulnerability, which was classified as critical, has been found in PHPGurukul Online Security Guards Hiring System 1.0. Affected by this issue is some unknow… |
CVE-2025-2657 | High | 7.3 | 2025-03-23 | A vulnerability classified as critical was found in projectworlds Apartment Visitors Management System 1.0. Affected by this vulnerability is an unknown functi… |
CVE-2025-2656 | High | 7.3 | 2025-03-23 | A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/login.php. Th… |
CVE-2025-2655 | High | 7.3 | 2025-03-23 | A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function save_users/delete_users of the file /cla… |
CVE-2025-2654 | High | 7.3 | 2025-03-23 | A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /ad… |
CVE-2025-2649 | High | 7.3 | 2025-03-23 | A vulnerability classified as critical was found in PHPGurukul Doctor Appointment Management System 1.0. This vulnerability affects unknown code of the file /c… |
CVE-2025-2648 | High | 7.3 | 2025-03-23 | A vulnerability classified as critical has been found in PHPGurukul Art Gallery Management System 1.0. This affects an unknown part of the file /admin/view-enq… |
CVE-2025-2647 | High | 7.3 | 2025-03-23 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2025-2646 | High | 7.3 | 2025-03-23 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown funct… |
CVE-2025-2644 | High | 7.3 | 2025-03-23 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /a… |
CVE-2025-2643 | High | 7.3 | 2025-03-23 | A vulnerability has been found in PHPGurukul Art Gallery Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2025-2642 | High | 7.3 | 2025-03-23 | A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.0. This affects an unknown part of the file /admin/e… |
CVE-2025-1446 | Critical | 9.8 | 2025-03-23 | The Pods WordPress plugin before 3.2.8.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection… |
CVE-2025-2641 | High | 7.3 | 2025-03-23 | A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.0. Affected by this issue is some unknown funct… |
CVE-2025-2640 | High | 7.3 | 2025-03-23 | A vulnerability was found in PHPGurukul Doctor Appointment Management System 1.0 and classified as critical. This issue affects some unknown processing of the… |
CVE-2025-2628 | Medium | 6.3 | 2025-03-22 | A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.1. Affected is an unknown function of the file /art-… |
CVE-2025-2627 | Medium | 6.3 | 2025-03-22 | A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.0. This issue affects some unknown processing o… |
CVE-2025-2626 | Medium | 6.3 | 2025-03-22 | A vulnerability classified as critical was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This vulnerability affects unknown code o… |
CVE-2025-2625 | Medium | 6.3 | 2025-03-22 | A vulnerability classified as critical has been found in westboy CicadasCMS 1.0. This affects an unknown part of the file /system/cms/content/page. The manipul… |
CVE-2025-2624 | Medium | 6.3 | 2025-03-22 | A vulnerability was found in westboy CicadasCMS 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /system/cm… |
CVE-2025-2186 | High | 7.5 | 2025-03-22 | The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to SQL Injection vi… |
CVE-2025-2478 | Medium | 4.9 | 2025-03-22 | The Code Clone plugin for WordPress is vulnerable to time-based SQL Injection via the ‘snippetId’ parameter in all versions up to, and including, 0.9 due to in… |
CVE-2025-1311 | Medium | 6.5 | 2025-03-22 | The WooCommerce Multivendor Marketplace – REST API plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in the update_delivery_status() f… |
CVE-2025-0723 | Medium | 6.5 | 2025-03-22 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind and time-based SQL Injections via the rid and search parame… |
CVE-2025-2608 | Medium | 6.3 | 2025-03-21 | A vulnerability classified as critical has been found in PHPGurukul Banquet Booking System 1.2. This affects an unknown part of the file /admin/view-user-queri… |
CVE-2025-2604 | Medium | 6.3 | 2025-03-21 | A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been classified as critical. Affected is an unknown funct… |
CVE-2025-2603 | Medium | 6.3 | 2025-03-21 | A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. This issue affects some unknown proce… |
CVE-2025-2602 | Medium | 6.3 | 2025-03-21 | A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. This vulnerability affects unkno… |
CVE-2025-2601 | Medium | 6.3 | 2025-03-21 | A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part… |
CVE-2025-2593 | Medium | 6.3 | 2025-03-21 | A vulnerability has been found in FastCMS up to 0.1.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/c… |
CVE-2025-29641 | High | 7.3 | 2025-03-21 | Phpgurukul Vehicle Record Management System v1.0 is vulnerable to SQL Injection in /index.php via the 'searchinputdata' parameter. |
CVE-2025-29640 | Medium | 5.4 | 2025-03-21 | Phpgurukul Human Metapneumovirus (HMPV) – Testing Management System v1.0 is vulnerable to SQL Injection in /patient-report.php via the parameter searchdata.. |
CVE-2025-2587 | Medium | 6.3 | 2025-03-21 | A vulnerability, which was classified as critical, was found in Jinher OA C6 1.0. This affects an unknown part of the file IncentivePlanFulfillAppprove.aspx. T… |
CVE-2025-2585 | High | 8.8 | 2025-03-21 | EBM Maintenance Center From EBM Technologies has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL comma… |
CVE-2025-26852 | Critical | 10.0 | 2025-03-20 | DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 allows SQL Injection. |
CVE-2025-29980 | Critical | 9.8 | 2025-03-20 | A SQL injection issue has been discovered in eTRAKiT.net release 3.2.1.77. Due to improper input validation, a remote unauthenticated attacker can run arbitrar… |
CVE-2024-8251 | Medium | 5.3 | 2025-03-20 | A vulnerability in mintplex-labs/anything-llm prior to version 1.2.2 allows for Prisma injection. The issue exists in the API endpoint "/embed/:embedId/stream-… |
CVE-2024-8055 | High | 7.5 | 2025-03-20 | Vanna v0.6.3 is vulnerable to SQL injection via Snowflake database in its file staging operations using the `PUT` and `COPY` commands. This vulnerability allow… |
CVE-2024-7764 | High | 8.1 | 2025-03-20 | Vanna-ai v0.6.2 is vulnerable to SQL Injection due to insufficient protection against injecting additional SQL commands from user requests. The vulnerability o… |
CVE-2024-12911 | High | 7.1 | 2025-03-20 | A vulnerability in the `default_jsonalyzer` function of the `JSONalyzeQueryEngine` in the run-llama/llama_index repository allows for SQL injection via prompt… |
CVE-2024-12909 | Critical | 9.8 | 2025-03-20 | A vulnerability in the FinanceChatLlamaPack of the run-llama/llama_index repository, versions up to v0.12.3, allows for SQL injection in the `run_sql_query` fu… |
CVE-2024-11958 | Critical | 9.8 | 2025-03-20 | A SQL injection vulnerability exists in the `duckdb_retriever` component of the run-llama/llama_index repository, specifically in the latest version. The vulne… |
CVE-2024-10835 | Critical | 9.8 | 2025-03-20 | In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /api/v1/editor/sql/run` allows execution of arbitrary SQL queries without any access control. This vul… |
CVE-2024-12016 | Critical | 9.8 | 2025-03-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CM Informatics CM News allows SQL Injection. This issue… |
CVE-2025-2511 | Medium | 4.9 | 2025-03-19 | The AHAthat Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.6 due to insuf… |
CVE-2025-27018 | Medium | 6.3 | 2025-03-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow MySQL Provider. When user triggered a DAG… |
CVE-2024-50631 | High | 7.5 | 2025-03-19 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in the system syncing daemon in Synology Drive Server before… |
CVE-2024-57151 | Medium | 6.8 | 2025-03-18 | SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveA… |
CVE-2025-24799 | High | 7.5 | 2025-03-18 | GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability… |
CVE-2025-21619 | Critical | 9.8 | 2025-03-18 | GLPI is a free asset and IT management software package. An administrator user can perfom a SQL injection through the rules configuration forms. This vulnerabi… |
CVE-2025-25582 | Medium | 6.1 | 2025-03-18 | yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList() method at /xml/OaNoticeMapper.xml. |