CWE-89 · SQL Injection (page 63)
Page 63 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-25590 | Medium | 6.1 | 2025-03-18 | yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml. |
CVE-2025-25580 | Medium | 6.1 | 2025-03-18 | yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql() method at /xml/UserMapper.xml. |
CVE-2024-8997 | Critical | 9.8 | 2025-03-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Vestel EVC04 Configuration Interface allows SQL Injection… |
CVE-2025-2473 | High | 7.3 | 2025-03-18 | A vulnerability was found in PHPGurukul Company Visitor Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2025-2472 | High | 7.3 | 2025-03-18 | A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2025-2471 | Medium | 6.3 | 2025-03-18 | A vulnerability, which was classified as critical, was found in PHPGurukul Boat Booking System 1.0. Affected is an unknown function of the file /boat-details.p… |
CVE-2025-2419 | Medium | 6.3 | 2025-03-17 | A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file… |
CVE-2025-2393 | Medium | 4.7 | 2025-03-17 | A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of t… |
CVE-2025-2392 | Medium | 4.7 | 2025-03-17 | A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown… |
CVE-2025-2391 | High | 7.3 | 2025-03-17 | A vulnerability classified as critical was found in code-projects Blood Bank Management System 1.0. This vulnerability affects unknown code of the file /admin/… |
CVE-2025-25914 | Critical | 9.8 | 2025-03-17 | SQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to execute arbitrary code via the fid parameter |
CVE-2025-2390 | Medium | 6.3 | 2025-03-17 | A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the file /user_dashboa… |
CVE-2025-2389 | Medium | 4.7 | 2025-03-17 | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionalit… |
CVE-2025-29425 | Medium | 5.5 | 2025-03-17 | Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in exam_save.php via the parameters member and first. |
CVE-2025-2387 | High | 7.3 | 2025-03-17 | A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /a… |
CVE-2025-2386 | High | 7.3 | 2025-03-17 | A vulnerability was found in PHPGurukul Local Services Search Engine Management System 1.0 and classified as critical. This issue affects some unknown processi… |
CVE-2025-2385 | High | 7.3 | 2025-03-17 | A vulnerability has been found in code-projects Modern Bag 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The… |
CVE-2025-2384 | Medium | 6.3 | 2025-03-17 | A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the f… |
CVE-2025-2383 | High | 7.3 | 2025-03-17 | A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some unknow… |
CVE-2025-2382 | High | 7.3 | 2025-03-17 | A vulnerability classified as critical was found in PHPGurukul Online Banquet Booking System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-2381 | High | 7.3 | 2025-03-17 | A vulnerability classified as critical has been found in PHPGurukul Curfew e-Pass Management System 1.0. Affected is an unknown function of the file /admin/sea… |
CVE-2025-2380 | High | 7.3 | 2025-03-17 | A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of… |
CVE-2025-2379 | High | 7.3 | 2025-03-17 | A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of… |
CVE-2025-2378 | High | 7.3 | 2025-03-17 | A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been classified as critical. This affects an unknown part of the file /downl… |
CVE-2025-2374 | Medium | 6.3 | 2025-03-17 | A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This issue affects some un… |
CVE-2025-2373 | Medium | 6.3 | 2025-03-17 | A vulnerability classified as critical was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This vulnerability affects unknown code of… |
CVE-2025-2372 | High | 7.3 | 2025-03-17 | A vulnerability classified as critical has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This affects an unknown part of the fi… |
CVE-2025-2200 | | 2025-03-17 | SQL injection vulnerability in the IcProgreso Innovación y Cualificación plugin. This vulnerability allows an attacker to obtain, update and delete data from t… | |
CVE-2025-2199 | | 2025-03-17 | SQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnerability allows an attacker to obtain, update and… | |
CVE-2025-2362 | High | 7.3 | 2025-03-17 | A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2025-2358 | Medium | 6.3 | 2025-03-17 | A vulnerability was found in Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System 1.0. It has been rated as critical. This issue affects some unk… |
CVE-2025-2353 | High | 7.3 | 2025-03-17 | A vulnerability, which was classified as critical, was found in VAM Virtual Airlines Manager up to 2.6.2. Affected is an unknown function of the file /vam/inde… |
CVE-2025-2351 | High | 7.3 | 2025-03-16 | A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the… |
CVE-2025-27281 | High | 8.5 | 2025-03-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cookforweb All In Menu all-in-menu allows Blind SQL Injec… |
CVE-2025-26978 | High | 8.5 | 2025-03-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster… |
CVE-2025-26976 | High | 8.5 | 2025-03-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aldo Latino PrivateContent private-content.This issue aff… |
CVE-2025-26886 | High | 7.6 | 2025-03-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PublishPress PublishPress Authors publishpress-authors al… |
CVE-2025-26875 | Critical | 9.3 | 2025-03-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in silverplugins217 Multiple Shipping And Billing Address Fo… |
CVE-2019-25222 | Medium | 4.9 | 2025-03-15 | The Thumbnail carousel slider plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to ins… |
CVE-2025-1670 | Medium | 6.5 | 2025-03-15 | The School Management System – WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'cid' parameter in all versions up to, and including… |
CVE-2025-1669 | Medium | 6.5 | 2025-03-15 | The School Management System – WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'addNotify' action in all versions up to, and includin… |
CVE-2024-54447 | | 2025-03-14 | Saved search functionality contains a blind SQL injection that can be exploited by authenticated attackers. Using a time-based blind SQLi technique the attacke… | |
CVE-2024-54446 | | 2025-03-14 | Document history functionality contains a blind SQL injection that can be exploited by authenticated attackers. Using a time-based blind SQLi technique the att… | |
CVE-2024-54445 | | 2025-03-14 | Login functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-based blind SQLi technique the attacker can… | |
CVE-2024-12245 | | 2025-03-14 | Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-based blind SQLi technique the attacker ca… | |
CVE-2022-29059 | Low | 2.7 | 2025-03-14 | An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiWeb version 7.0.1 and below, 6.4.2 and b… |
CVE-2024-13321 | High | 7.5 | 2025-03-14 | The AnalyticsWP plugin for WordPress is vulnerable to SQL Injection via the 'custom_sql' parameter in all versions up to, and including, 2.0.0 due to insuffici… |
CVE-2025-2221 | High | 7.5 | 2025-03-14 | The WPCOM Member plugin for WordPress is vulnerable to time-based SQL Injection via the ‘user_phone’ parameter in all versions up to, and including, 1.7.6 due… |
CVE-2025-30022 | Medium | 6.8 | 2025-03-14 | CM Soluces Informatica Ltda Auto Atendimento 1.x.x was discovered to contain a SQL injection via the DATANASC parameter. |
CVE-2025-26163 | Critical | 9.8 | 2025-03-14 | CM Soluces Informatica Ltda Auto Atendimento 1.x.x was discovered to contain a SQL injection via the CPF parameter. |
CVE-2025-28011 | Medium | 6.1 | 2025-03-13 | A SQL Injection was found in loginsystem/change-password.php in PHPGurukul User Registration & Login and User Management System v3.3 allows remote attackers to… |
CVE-2025-27103 | Medium | 6.5 | 2025-03-13 | DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass for the patch for CVE-2024-55953 allows authent… |
CVE-2025-24974 | Medium | 6.5 | 2025-03-13 | DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, authenticated users can read and deserialize arbitrary f… |
CVE-2025-2250 | Medium | 4.9 | 2025-03-13 | The WordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins plugin for WordPress is vulnerable to SQL Injection via the 'orderby' param… |
CVE-2025-2107 | High | 7.5 | 2025-03-13 | The ArielBrailovsky-ViralAd plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the printResultAndDie() function in all versions up t… |
CVE-2025-2106 | High | 7.5 | 2025-03-13 | The ArielBrailovsky-ViralAd plugin for WordPress is vulnerable to SQL Injection via the 'text' and 'id' parameters of the limpia() function in all versions up… |
CVE-2025-22954 | Critical | 10.0 | 2025-03-12 | GetLateOrMissingIssues in C4/Serials.pm in Koha before 24.11.02 allows SQL Injection in /serials/lateissues-export.pl via the supplierid or serialid parameter. |
CVE-2025-2217 | Medium | 6.3 | 2025-03-12 | A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 1.3. This affects the function ProcessRequest of… |
CVE-2021-37787 | Medium | 6.5 | 2025-03-11 | The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is affected by a SQL Injection vulnerability via a HTTP POST request to the Ti… |
CVE-2025-27617 | High | 8.8 | 2025-03-11 | Pimcore is an open source data and experience management platform. Prior to version 11.5.4, authenticated users can craft a filter string used to cause a SQL i… |
CVE-2024-54026 | Medium | 4.3 | 2025-03-11 | An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0 through 4.4.6, FortiSandbox 4.2 all vers… |
CVE-2024-33501 | Medium | 4.2 | 2025-03-11 | Two improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in Fortinet FortiAnalyzer version 7.4.0 through… |
CVE-2025-22370 | | 2025-03-11 | Many fields for the web configuration interface of the firmware for Mennekes Smart / Premium Chargingpoints can be abused to execute arbitrary SQL commands bec… | |
CVE-2025-2132 | Medium | 4.7 | 2025-03-09 | A vulnerability classified as critical has been found in ftcms 2.1. Affected is an unknown function of the file /admin/index.php/web/ajax_all_lists of the comp… |
CVE-2025-2126 | Medium | 6.3 | 2025-03-09 | A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as critical. This issue affects some unknown processing of the file /exten… |
CVE-2025-2118 | High | 7.3 | 2025-03-09 | A vulnerability was found in Quantico Tecnologia PRMV 6.48. It has been classified as critical. This affects an unknown part of the file /admin/login.php of th… |
CVE-2025-2117 | Medium | 6.3 | 2025-03-09 | A vulnerability was found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0 and classified as critical. Affected by th… |
CVE-2025-2113 | High | 7.3 | 2025-03-09 | A vulnerability was found in AT Software Solutions ATSVD up to 3.4.1. It has been rated as critical. Affected by this issue is some unknown functionality of th… |
CVE-2025-2112 | Medium | 6.3 | 2025-03-08 | A vulnerability was found in user-xiangpeng yaoqishan up to a47fec4a31cbd13698c592dfdc938c8824dd25e4. It has been declared as critical. Affected by this vulner… |
CVE-2025-1323 | High | 7.5 | 2025-03-08 | The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to SQL Injection via the 'databeat' parameter in all versions up to… |
CVE-2024-13844 | Medium | 4.9 | 2025-03-08 | The Post SMTP plugin for WordPress is vulnerable to generic SQL Injection via the ‘columns’ parameter in all versions up to, and including, 3.1.2 due to insuff… |
CVE-2025-2088 | High | 7.3 | 2025-03-07 | A vulnerability, which was classified as critical, was found in PHPGurukul Pre-School Enrollment System up to 1.0. Affected is an unknown function of the file… |
CVE-2025-1768 | Medium | 6.5 | 2025-03-07 | The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to blind SQL Injection via the 'search' parameter in all versions up to, and including, 12.4… |
CVE-2025-0959 | High | 8.8 | 2025-03-07 | The Eventer - WordPress Event & Booking Manager Plugin plugin for WordPress is vulnerable to SQL Injection via the reg_id parameter in all versions up to, and… |
CVE-2024-13781 | Medium | 6.5 | 2025-03-07 | The Hero Maps Premium plugin for WordPress is vulnerable to SQL Injection via several AJAX actions in all versions up to, and including, 2.3.9 due to insuffici… |
CVE-2024-12609 | Medium | 6.5 | 2025-03-07 | The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'view-attendance' page in all versions up to, and includ… |
CVE-2024-12607 | Medium | 6.5 | 2025-03-07 | The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'mj_smgt_show_event_task' AJAX act… |
CVE-2024-13320 | High | 7.5 | 2025-03-07 | The CURCY - WooCommerce Multi Currency - Currency Switcher plugin for WordPress is vulnerable to SQL Injection via the 'wc_filter_price_meta[where]' parameter… |
CVE-2025-2067 | High | 7.3 | 2025-03-07 | A vulnerability was found in projectworlds Life Insurance Management System 1.0 and classified as critical. This issue affects some unknown processing of the f… |
CVE-2025-2066 | High | 7.3 | 2025-03-07 | A vulnerability has been found in projectworlds Life Insurance Management System 1.0 and classified as critical. This vulnerability affects unknown code of the… |
CVE-2025-2065 | High | 7.3 | 2025-03-07 | A vulnerability, which was classified as critical, was found in projectworlds Life Insurance Management System 1.0. This affects an unknown part of the file /e… |
CVE-2025-2064 | High | 7.3 | 2025-03-07 | A vulnerability, which was classified as critical, has been found in projectworlds Life Insurance Management System 1.0. Affected by this issue is some unknown… |
CVE-2025-2063 | High | 7.3 | 2025-03-07 | A vulnerability classified as critical was found in projectworlds Life Insurance Management System 1.0. Affected by this vulnerability is an unknown functional… |
CVE-2025-2062 | High | 7.3 | 2025-03-07 | A vulnerability classified as critical has been found in projectworlds Life Insurance Management System 1.0. Affected is an unknown function of the file /clien… |
CVE-2025-2060 | High | 7.3 | 2025-03-07 | A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as critical. This affects an unknown part of the file /ad… |
CVE-2025-2059 | High | 7.3 | 2025-03-07 | A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2025-2058 | High | 7.3 | 2025-03-07 | A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown fun… |
CVE-2025-2057 | High | 7.3 | 2025-03-07 | A vulnerability, which was classified as critical, was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /… |
CVE-2025-2054 | Medium | 4.7 | 2025-03-07 | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown fun… |
CVE-2025-2053 | Medium | 6.3 | 2025-03-07 | A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. Affected is an unknown function of the fi… |
CVE-2025-2052 | Medium | 6.3 | 2025-03-07 | A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This issue affects some unknown processing of the… |
CVE-2025-2051 | Medium | 6.3 | 2025-03-07 | A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This vulnerability affects unknown code of th… |
CVE-2025-2050 | High | 7.3 | 2025-03-07 | A vulnerability classified as critical was found in PHPGurukul User Registration & Login and User Management System 3.3. Affected by this vulnerability is an u… |
CVE-2025-2046 | Medium | 6.3 | 2025-03-06 | A vulnerability was found in SourceCodester Best Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionalit… |
CVE-2025-2044 | Medium | 4.7 | 2025-03-06 | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown fun… |
CVE-2025-2041 | Medium | 6.3 | 2025-03-06 | A vulnerability, which was classified as critical, has been found in s-a-zhd Ecommerce-Website-using-PHP 1.0. Affected by this issue is some unknown functional… |
CVE-2025-25763 | Critical | 9.8 | 2025-03-06 | crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead() in /system/SystemDatabackupServices.php |
CVE-2025-2039 | Medium | 4.7 | 2025-03-06 | A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/del… |
CVE-2025-2037 | Medium | 6.3 | 2025-03-06 | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the f… |
CVE-2025-2036 | Medium | 6.3 | 2025-03-06 | A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0. It has been classified as critical. This affects an unknown part of the file details.php… |