CWE-89 · SQL Injection (page 64)
Page 64 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-4490 | High | 7.3 | 2025-05-09 | A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /view-ticket-admin… |
CVE-2025-4489 | High | 7.3 | 2025-05-09 | A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-4488 | High | 7.3 | 2025-05-09 | A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2025-4487 | High | 7.3 | 2025-05-09 | A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?… |
CVE-2025-4486 | High | 7.3 | 2025-05-09 | A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.ph… |
CVE-2025-4485 | High | 7.3 | 2025-05-09 | A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax… |
CVE-2025-4484 | High | 7.3 | 2025-05-09 | A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. This affects an unknown part of the file /ajax.php?acti… |
CVE-2025-4483 | High | 7.3 | 2025-05-09 | A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionali… |
CVE-2025-4482 | High | 7.3 | 2025-05-09 | A vulnerability classified as critical was found in Project Worlds Student Project Allocation System 1.0. Affected by this vulnerability is an unknown function… |
CVE-2025-4481 | High | 7.3 | 2025-05-09 | A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This issue affects some unknown processing… |
CVE-2025-46192 | Critical | 9.8 | 2025-05-09 | SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_payment_update.php via the order_id POST parameter. |
CVE-2025-46190 | Critical | 9.8 | 2025-05-09 | SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_delivery_update.php via the order_id POST parameter. |
CVE-2025-46189 | Critical | 9.8 | 2025-05-09 | SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_order_customer_update.php via the order_id POST parameter. |
CVE-2025-46188 | Critical | 9.8 | 2025-05-09 | SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php. |
CVE-2025-45885 | Critical | 9.8 | 2025-05-09 | PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Attackers can inject malicious code from t… |
CVE-2025-4467 | High | 7.3 | 2025-05-09 | A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of t… |
CVE-2025-4466 | High | 7.3 | 2025-05-09 | A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?act… |
CVE-2025-4465 | High | 7.3 | 2025-05-09 | A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fil… |
CVE-2025-4464 | High | 7.3 | 2025-05-09 | A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-4463 | High | 7.3 | 2025-05-09 | A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. Affected is an unknown function of the file /ajax.php?a… |
CVE-2025-4459 | Medium | 6.3 | 2025-05-09 | A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown function… |
CVE-2025-4458 | Medium | 6.3 | 2025-05-09 | A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown… |
CVE-2025-4457 | High | 7.3 | 2025-05-09 | A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the fi… |
CVE-2025-4456 | High | 7.3 | 2025-05-09 | A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The ma… |
CVE-2025-45820 | Medium | 6.5 | 2025-05-08 | Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/pop_author_edit.php. |
CVE-2025-45819 | Medium | 6.5 | 2025-05-08 | Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/author.php. |
CVE-2025-45818 | Medium | 6.5 | 2025-05-08 | Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/item_status.php. |
CVE-2025-46828 | Critical | 9.8 | 2025-05-07 | WeGIA is a web manager for charitable institutions. An unauthenticated SQL Injection vulnerability was identified in versions up to and including 3.3.0 in the… |
CVE-2025-47657 | Critical | 9.3 | 2025-05-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Productive Minds Productive Commerce productive-commerce… |
CVE-2025-47643 | High | 7.6 | 2025-05-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ELEXtensions ELEX Product Feed for WooCommerce allows SQL… |
CVE-2025-47587 | High | 7.6 | 2025-05-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce YaySMTP yaysmtp allows Blind SQL Injection.Th… |
CVE-2025-47544 | High | 7.6 | 2025-05-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommer… |
CVE-2025-47538 | High | 7.6 | 2025-05-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdever Cart tracking for WooCommerce cart-tracking-for-w… |
CVE-2025-47537 | High | 7.6 | 2025-05-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-w… |
CVE-2025-47490 | High | 8.5 | 2025-05-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows SQL I… |
CVE-2025-47460 | High | 7.6 | 2025-05-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TrackShip TrackShip for WooCommerce trackship-for-woocomm… |
CVE-2025-29153 | Medium | 5.4 | 2025-05-07 | SQL Injection vulnerability in lemeconsultoria HCM galera.app v.4.58.0 allows an attacker to execute arbitrary code via the Data export, filters functions. |
CVE-2025-0668 | Critical | 9.8 | 2025-05-07 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects… |
CVE-2025-0853 | High | 7.5 | 2025-05-06 | The PGS Core plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'save_header_builder' function in all versions up to, and inc… |
CVE-2025-44073 | Critical | 9.8 | 2025-05-06 | SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_comment_news.php. |
CVE-2023-33770 | Medium | 5.1 | 2025-05-06 | Real Estate Management System v1.0 was discovered to contain a SQL injection vulnerability via the message parameter at /contact.php. |
CVE-2025-4363 | High | 7.3 | 2025-05-06 | A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. This issue affects some unknown processing of the… |
CVE-2025-4362 | High | 7.3 | 2025-05-06 | A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?actio… |
CVE-2025-4361 | High | 7.3 | 2025-05-06 | A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. This affects an unknown part of the file /department… |
CVE-2025-4360 | High | 7.3 | 2025-05-06 | A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionali… |
CVE-2025-4359 | High | 7.3 | 2025-05-06 | A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2025-4358 | High | 7.3 | 2025-05-06 | A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. Affected is an unknown function of the file /admin-p… |
CVE-2025-4353 | Medium | 6.3 | 2025-05-06 | A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Affected is an unknown function of the… |
CVE-2025-4352 | Medium | 6.3 | 2025-05-06 | A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424. This issue affects some unknown pr… |
CVE-2025-40624 | Critical | 9.8 | 2025-05-06 | SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information… |
CVE-2025-40623 | Critical | 9.8 | 2025-05-06 | SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information… |
CVE-2025-40622 | Critical | 9.8 | 2025-05-06 | SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information… |
CVE-2025-40621 | Critical | 9.8 | 2025-05-06 | SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information… |
CVE-2025-40620 | Critical | 9.8 | 2025-05-06 | SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information… |
CVE-2025-2011 | High | 7.5 | 2025-05-06 | The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including… |
CVE-2025-4332 | High | 7.3 | 2025-05-06 | A vulnerability was found in PHPGurukul Company Visitor Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2025-4331 | High | 7.3 | 2025-05-06 | A vulnerability classified as critical was found in SourceCodester Online Student Clearance System 1.0. This vulnerability affects unknown code of the file /Ad… |
CVE-2025-4314 | High | 7.3 | 2025-05-06 | A vulnerability has been found in SourceCodester Advanced Web Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-4313 | High | 7.3 | 2025-05-06 | A vulnerability, which was classified as critical, was found in SourceCodester Advanced Web Store 1.0. Affected is an unknown function of the file /admin/admin… |
CVE-2025-4312 | High | 7.3 | 2025-05-06 | A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the f… |
CVE-2025-4311 | High | 7.3 | 2025-05-06 | A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of the file /admin/upda… |
CVE-2025-4309 | High | 7.3 | 2025-05-06 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2025-4308 | High | 7.3 | 2025-05-06 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been declared as critical. Affected by this vulnerability is an unknown funct… |
CVE-2025-4307 | High | 7.3 | 2025-05-06 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been classified as critical. Affected is an unknown function of the file /adm… |
CVE-2025-4306 | High | 7.3 | 2025-05-06 | A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as critical. This issue affects some unknown processing of the… |
CVE-2025-4304 | High | 7.3 | 2025-05-06 | A vulnerability, which was classified as critical, was found in PHPGurukul Cyber Cafe Management System 1.0. This affects an unknown part of the file /adminpro… |
CVE-2025-4303 | High | 7.3 | 2025-05-06 | A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected by this issue is… |
CVE-2025-4301 | High | 7.3 | 2025-05-06 | A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. Affected by this vulnerability is an unknown functionality of t… |
CVE-2025-4300 | High | 7.3 | 2025-05-06 | A vulnerability classified as critical has been found in itsourcecode Content Management System 1.0. Affected is an unknown function of the file /search_list.p… |
CVE-2025-4297 | High | 7.3 | 2025-05-05 | A vulnerability was found in PHPGurukul Men Salon Management System 2.0. It has been classified as critical. This affects an unknown part of the file /admin/ch… |
CVE-2025-44074 | Critical | 9.8 | 2025-05-05 | SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_topic.php. |
CVE-2025-44072 | Critical | 9.8 | 2025-05-05 | SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_manager.php. |
CVE-2025-4283 | High | 7.3 | 2025-05-05 | A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the… |
CVE-2025-45240 | Medium | 6.5 | 2025-05-05 | foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php. |
CVE-2025-45322 | High | 8.8 | 2025-05-05 | kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter. |
CVE-2025-45321 | High | 8.8 | 2025-05-05 | kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.php via the parameter: rPassword. |
CVE-2025-26241 | Medium | 6.5 | 2025-05-05 | A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket <=1.17.5 allows authenticated attackers to execute arbitrary SQL… |
CVE-2025-4267 | Medium | 4.7 | 2025-05-05 | A vulnerability, which was classified as critical, was found in SourceCodester/oretnom23 Stock Management System 1.0. This affects an unknown part of the file… |
CVE-2025-4266 | High | 7.3 | 2025-05-05 | A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. Affected by this issue is some unknown functionality o… |
CVE-2025-4265 | High | 7.3 | 2025-05-05 | A vulnerability classified as critical was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this vulnerability is an unknown functionalit… |
CVE-2025-4264 | High | 7.3 | 2025-05-05 | A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/e… |
CVE-2025-4263 | High | 7.3 | 2025-05-05 | A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been rated as critical. This issue affects some unknown processing of t… |
CVE-2025-4262 | High | 7.3 | 2025-05-05 | A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of t… |
CVE-2025-4250 | High | 7.3 | 2025-05-04 | A vulnerability was found in code-projects Nero Social Networking Site 1.0. It has been classified as critical. This affects an unknown part of the file /index… |
CVE-2025-4249 | High | 7.3 | 2025-05-04 | A vulnerability was found in PHPGurukul e-Diary Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2025-4248 | Medium | 6.3 | 2025-05-04 | A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by this vulnerability is an unknown function… |
CVE-2025-4247 | Medium | 6.3 | 2025-05-04 | A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List System 1.0. Affected is an unknown function of the file /delet… |
CVE-2025-4244 | Medium | 6.3 | 2025-05-03 | A vulnerability, which was classified as critical, was found in code-projects Online Bus Reservation System 1.0. This affects an unknown part of the file /seat… |
CVE-2025-4243 | Medium | 6.3 | 2025-05-03 | A vulnerability, which was classified as critical, has been found in code-projects Online Bus Reservation System 1.0. Affected by this issue is some unknown fu… |
CVE-2025-4242 | High | 7.3 | 2025-05-03 | A vulnerability classified as critical was found in PHPGurukul Online Birth Certificate System 2.0. Affected by this vulnerability is an unknown functionality… |
CVE-2025-4241 | High | 7.3 | 2025-05-03 | A vulnerability classified as critical has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the fi… |
CVE-2025-4226 | High | 7.3 | 2025-05-03 | A vulnerability classified as critical has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. This affects an unknown part of the file /add-c… |
CVE-2025-4214 | High | 7.3 | 2025-05-02 | A vulnerability was found in PHPGuruku Online DJ Booking Management System 1.0 and classified as critical. This issue affects some unknown processing of the fi… |
CVE-2025-4213 | High | 7.3 | 2025-05-02 | A vulnerability has been found in PHPGurukul Online Birth Certificate System 1.0 and classified as critical. This vulnerability affects unknown code of the fil… |
CVE-2025-4204 | High | 7.5 | 2025-05-02 | The Ultimate Auction Pro plugin for WordPress is vulnerable to SQL Injection via the ‘auction_id’ parameter in all versions up to, and including, 1.5.2 due to… |
CVE-2025-2812 | Critical | 9.8 | 2025-05-02 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mydata Informatics Ticket Sales Automation allows Blind S… |
CVE-2025-3708 | Critical | 9.8 | 2025-05-02 | Le-show medical practice management system from Le-yan has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL com… |
CVE-2025-3707 | Medium | 6.5 | 2025-05-02 | The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL command to read database… |
CVE-2024-13344 | High | 7.5 | 2025-05-02 | The Advance Seat Reservation Management for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'profileId' parameter in all versions up to… |
CVE-2024-13322 | High | 7.5 | 2025-05-02 | The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the 'a_id' parameter in all versions u… |