CWE-89 · SQL Injection (page 63)
Page 63 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-4781 | Medium | 6.3 | 2025-05-16 | A vulnerability classified as critical has been found in PHPGurukul Park Ticketing Management System 2.0. Affected is an unknown function of the file /forgot-p… |
CVE-2025-4780 | Medium | 6.3 | 2025-05-16 | A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been rated as critical. This issue affects some unknown processing of the… |
CVE-2025-4778 | Medium | 6.3 | 2025-05-16 | A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been declared as critical. This vulnerability affects unknown code of the… |
CVE-2025-4777 | Medium | 6.3 | 2025-05-16 | A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been classified as critical. This affects an unknown part of the file /vie… |
CVE-2025-4773 | High | 7.3 | 2025-05-16 | A vulnerability was found in PHPGurukul Online Course Registration 3.1 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2024-40120 | Medium | 6.5 | 2025-05-16 | seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go. |
CVE-2025-4772 | High | 7.3 | 2025-05-16 | A vulnerability has been found in PHPGurukul Online Course Registration 3.1 and classified as critical. Affected by this vulnerability is an unknown functional… |
CVE-2025-4771 | High | 7.3 | 2025-05-16 | A vulnerability, which was classified as critical, was found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/c… |
CVE-2025-4770 | Medium | 6.3 | 2025-05-16 | A vulnerability, which was classified as critical, has been found in PHPGurukul Park Ticketing Management System 2.0. This issue affects some unknown processin… |
CVE-2025-4766 | High | 7.3 | 2025-05-16 | A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-4765 | High | 7.3 | 2025-05-16 | A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been classified as critical. Affected is an unknown function of the file /admin/conta… |
CVE-2025-4761 | High | 7.3 | 2025-05-16 | A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical. This vulnerability affects unknown code of the file /a… |
CVE-2025-4758 | High | 7.3 | 2025-05-16 | A vulnerability classified as critical has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected is an unknown function of the file /contact… |
CVE-2025-4757 | High | 7.3 | 2025-05-16 | A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. It has been rated as critical. This issue affects some unknown processing of the… |
CVE-2025-4746 | High | 7.3 | 2025-05-16 | A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pag… |
CVE-2025-4743 | Medium | 6.3 | 2025-05-16 | A vulnerability classified as critical was found in code-projects Employee Record System 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-4741 | High | 7.3 | 2025-05-16 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /p… |
CVE-2025-4739 | High | 7.3 | 2025-05-16 | A vulnerability was found in projectworlds Hospital Database Management System 1.0. It has been classified as critical. This affects an unknown part of the fil… |
CVE-2025-4736 | High | 7.3 | 2025-05-16 | A vulnerability was found in PHPGurukul Daily Expense Tracker 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2025-4734 | High | 7.3 | 2025-05-16 | A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/ci… |
CVE-2025-4728 | High | 7.3 | 2025-05-15 | A vulnerability was found in SourceCodester Best Online News Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /searc… |
CVE-2025-4726 | High | 7.3 | 2025-05-15 | A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2025-4725 | High | 7.3 | 2025-05-15 | A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. This affects an unknown part of the file /view_dr… |
CVE-2025-4724 | High | 7.3 | 2025-05-15 | A vulnerability, which was classified as critical, has been found in itsourcecode Placement Management System 1.0. Affected by this issue is some unknown funct… |
CVE-2025-4723 | High | 7.3 | 2025-05-15 | A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-4722 | High | 7.3 | 2025-05-15 | A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /edit_profil… |
CVE-2025-4721 | High | 7.3 | 2025-05-15 | A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the fil… |
CVE-2025-4719 | High | 7.3 | 2025-05-15 | A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2025-4718 | High | 7.3 | 2025-05-15 | A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2025-4717 | High | 7.3 | 2025-05-15 | A vulnerability, which was classified as critical, was found in PHPGurukul Company Visitor Management System 2.0. Affected is an unknown function of the file /… |
CVE-2025-4716 | High | 7.3 | 2025-05-15 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of t… |
CVE-2025-4715 | High | 7.3 | 2025-05-15 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functiona… |
CVE-2025-47785 | High | 8.3 | 2025-05-15 | Emlog is an open source website building system. In versions up to and including 2.5.9, SQL injection occurs because the $origContent parameter in admin/articl… |
CVE-2025-2248 | Medium | 5.4 | 2025-05-15 | The WP-PManager WordPress plugin through 1.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL inject… |
CVE-2025-2203 | Medium | 6.1 | 2025-05-15 | The FunnelKit WordPress plugin before 3.10.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injec… |
CVE-2024-9879 | Medium | 5.4 | 2025-05-15 | The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perfor… |
CVE-2024-9838 | Medium | 5.4 | 2025-05-15 | The Auto Affiliate Links WordPress plugin before 6.4.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform… |
CVE-2024-9831 | High | 7.2 | 2025-05-15 | The Taskbuilder WordPress plugin before 3.0.9 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL inje… |
CVE-2024-6809 | Critical | 9.8 | 2025-05-15 | The Simple Video Directory WordPress plugin before 1.4.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX actio… |
CVE-2024-6159 | Critical | 9.8 | 2025-05-15 | The Push Notification for Post and BuddyPress WordPress plugin before 1.9.4 does not properly sanitise and escape a parameter before using it in a SQL statemen… |
CVE-2024-12735 | High | 7.2 | 2025-05-15 | The Advance Post Prefix WordPress plugin through 1.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins and above t… |
CVE-2024-11372 | High | 7.2 | 2025-05-15 | The Connexion Logs WordPress plugin through 3.0.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL i… |
CVE-2024-11269 | High | 7.2 | 2025-05-15 | The AHAthat Plugin WordPress plugin through 1.6 does not sanitize and escape a parameter before using it in a SQL statement, allowing Admin to perform SQL inje… |
CVE-2024-11267 | High | 8.8 | 2025-05-15 | The JSP Store Locator WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing user with Contributor… |
CVE-2024-10009 | Medium | 4.1 | 2025-05-15 | The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perfor… |
CVE-2023-6030 | Medium | 5.4 | 2025-05-15 | The LogDash Activity Log WordPress plugin before 1.1.4 hooks the wp_login_failed function (from src/Hooks/Users.php) in order to log failed login attempts to t… |
CVE-2025-4714 | High | 7.3 | 2025-05-15 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/r… |
CVE-2025-4713 | High | 7.3 | 2025-05-15 | A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages… |
CVE-2025-4712 | High | 7.3 | 2025-05-15 | A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pag… |
CVE-2025-4711 | High | 7.3 | 2025-05-15 | A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/stock… |
CVE-2025-4710 | High | 7.3 | 2025-05-15 | A vulnerability, which was classified as critical, has been found in Campcodes Sales and Inventory System 1.0. Affected by this issue is some unknown functiona… |
CVE-2025-4709 | High | 7.3 | 2025-05-15 | A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-4708 | High | 7.3 | 2025-05-15 | A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/sales_add… |
CVE-2025-4707 | High | 7.3 | 2025-05-15 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /p… |
CVE-2025-4706 | High | 7.3 | 2025-05-15 | A vulnerability was found in projectworlds Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2025-4705 | High | 7.3 | 2025-05-15 | A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been classified as critical. This affects an unknown part of the file /a… |
CVE-2025-4704 | High | 7.3 | 2025-05-15 | A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2025-4703 | High | 7.3 | 2025-05-15 | A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown fu… |
CVE-2025-4702 | High | 7.3 | 2025-05-15 | A vulnerability, which was classified as critical, was found in PHPGurukul Vehicle Parking Management System 1.13. Affected is an unknown function of the file… |
CVE-2025-46053 | Medium | 5.1 | 2025-05-15 | A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a crafted payload in… |
CVE-2025-4699 | High | 7.3 | 2025-05-15 | A vulnerability classified as critical was found in PHPGurukul Apartment Visitors Management System 1.0. This vulnerability affects unknown code of the file /a… |
CVE-2025-4698 | High | 7.3 | 2025-05-15 | A vulnerability classified as critical has been found in PHPGurukul Directory Management System 2.0. This affects an unknown part of the file /admin/forget-pas… |
CVE-2025-46052 | Critical | 9.8 | 2025-05-15 | An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command and extract sensitive data by injecting a… |
CVE-2025-4697 | High | 7.3 | 2025-05-15 | A vulnerability was found in PHPGurukul Directory Management System 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-4696 | Medium | 6.3 | 2025-05-15 | A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unkn… |
CVE-2025-4695 | Medium | 6.3 | 2025-05-15 | A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. It has been classified as critical. Affected is an unknown function of the… |
CVE-2024-10864 | | 2025-05-14 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText Advanced Authentication. This issue affects Adva… | |
CVE-2025-3834 | High | 8.1 | 2025-05-14 | Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report. |
CVE-2025-3833 | High | 8.1 | 2025-05-14 | Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports. |
CVE-2025-28056 | Critical | 9.8 | 2025-05-13 | rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component. |
CVE-2025-44831 | Critical | 9.8 | 2025-05-13 | EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface. |
CVE-2025-28057 | High | 7.2 | 2025-05-13 | owl-admin v3.2.2~ to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/admin_menus/save_order. |
CVE-2025-40628 | | 2025-05-13 | SQL injection vulnerability in DomainsPRO 1.2. This vulnerability could allow an attacker to retrieve, create, update and delete databases via the “d” paramete… | |
CVE-2025-26390 | Critical | 9.8 | 2025-05-13 | A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). The web service of affected devices is vulnerable to SQL inj… |
CVE-2024-51444 | Medium | 6.5 | 2025-05-13 | A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The application insufficiently validates user in… |
CVE-2025-3107 | Medium | 6.5 | 2025-05-13 | The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby' parameter in all versions up to, and including, 4.9.9.8 due to… |
CVE-2025-4396 | High | 7.5 | 2025-05-13 | The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, a… |
CVE-2023-49641 | Critical | 9.8 | 2025-05-13 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginCheck.php resource does not… |
CVE-2025-47682 | Critical | 9.3 | 2025-05-12 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allow… |
CVE-2025-44830 | Critical | 9.8 | 2025-05-12 | EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface. |
CVE-2025-4559 | Critical | 9.8 | 2025-05-12 | The ISOinsight from Netvision has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, an… |
CVE-2025-4554 | High | 7.3 | 2025-05-12 | A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. This affects an unknown part of the file… |
CVE-2025-4553 | High | 7.3 | 2025-05-12 | A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by this issue is some unknown functionali… |
CVE-2025-4550 | High | 7.3 | 2025-05-11 | A vulnerability, which was classified as critical, has been found in PHPGurukul Apartment Visitors Management System 1.0. This issue affects some unknown proce… |
CVE-2025-4549 | High | 7.3 | 2025-05-11 | A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/reg… |
CVE-2025-4548 | High | 7.3 | 2025-05-11 | A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /routers/router.ph… |
CVE-2025-4543 | High | 7.3 | 2025-05-11 | A vulnerability, which was classified as critical, was found in LyLme Spage 2.1. This affects an unknown part of the file lylme_spage/blob/master/admin/ajax_li… |
CVE-2025-4541 | Medium | 6.3 | 2025-05-11 | A vulnerability classified as critical has been found in LmxCMS 1.41. Affected is the function manageZt of the file c\admin\ZtAction.class.php of the component… |
CVE-2025-4514 | Medium | 6.3 | 2025-05-10 | A vulnerability, which was classified as critical, has been found in Zhengzhou Jiuhua Electronic Technology mayicms up to 5.8E. Affected by this issue is some… |
CVE-2025-4510 | Medium | 6.3 | 2025-05-10 | A vulnerability was found in Changjietong UFIDA CRM 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /optnty/optntyda… |
CVE-2025-4509 | High | 7.3 | 2025-05-10 | A vulnerability, which was classified as critical, has been found in PHPGurukul e-Diary Management System 1.0. This issue affects some unknown processing of th… |
CVE-2025-4508 | High | 7.3 | 2025-05-10 | A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /my-profile.p… |
CVE-2025-4507 | High | 7.3 | 2025-05-10 | A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /routers/add-item… |
CVE-2025-4506 | High | 7.3 | 2025-05-10 | A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-4505 | High | 7.3 | 2025-05-10 | A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknow… |
CVE-2025-4504 | High | 7.3 | 2025-05-10 | A vulnerability was found in SourceCodester Online College Library System 1.0. It has been classified as critical. Affected is an unknown function of the file… |
CVE-2025-4503 | High | 7.3 | 2025-05-10 | A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages… |
CVE-2025-4502 | High | 7.3 | 2025-05-10 | A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pag… |
CVE-2025-4492 | High | 7.3 | 2025-05-09 | A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0. This issue affects some unknown processing of t… |
CVE-2025-4491 | High | 7.3 | 2025-05-09 | A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/tic… |