CWE-89 · SQL Injection (page 65)
Page 65 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-12023 | Medium | 6.5 | 2025-05-02 | The FULL – Cliente plugin for WordPress is vulnerable to SQL Injection via the 'formId' parameter in all versions 3.1.5 to 3.1.25 due to insufficient escaping… |
CVE-2025-4197 | Medium | 6.3 | 2025-05-02 | A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file /edit_… |
CVE-2025-4196 | Medium | 6.3 | 2025-05-02 | A vulnerability was found in SourceCodester Patient Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of… |
CVE-2025-4195 | High | 7.3 | 2025-05-02 | A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /aja… |
CVE-2025-4193 | High | 7.3 | 2025-05-02 | A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-4192 | High | 7.3 | 2025-05-02 | A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin… |
CVE-2025-4191 | High | 7.3 | 2025-05-02 | A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown fun… |
CVE-2025-4176 | High | 7.3 | 2025-05-01 | A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as critical. This vulnerability affects unknown code of th… |
CVE-2025-4174 | High | 7.3 | 2025-05-01 | A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown f… |
CVE-2025-46337 | Critical | 10.0 | 2025-05-01 | ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a… |
CVE-2025-4173 | Medium | 6.3 | 2025-05-01 | A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is the function delete_cart of the f… |
CVE-2025-4164 | High | 7.3 | 2025-05-01 | A vulnerability, which was classified as critical, was found in PHPGurukul Employee Record Management System 1.3. Affected is an unknown function of the file c… |
CVE-2025-4163 | Medium | 6.3 | 2025-05-01 | A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. This issue affects some unknown processing of the file… |
CVE-2025-4157 | Medium | 6.3 | 2025-05-01 | A vulnerability was found in PHPGurukul Boat Booking System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/booki… |
CVE-2025-4156 | Medium | 6.3 | 2025-05-01 | A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/cha… |
CVE-2025-4155 | Medium | 6.3 | 2025-05-01 | A vulnerability, which was classified as critical, was found in PHPGurukul Boat Booking System 1.0. This affects an unknown part of the file /admin/edit-boat.p… |
CVE-2025-4154 | Medium | 6.3 | 2025-05-01 | A vulnerability, which was classified as critical, has been found in PHPGurukul Pre-School Enrollment System 1.0. Affected by this issue is some unknown functi… |
CVE-2025-4153 | High | 7.3 | 2025-05-01 | A vulnerability classified as critical was found in PHPGurukul Park Ticketing Management System 2.0. Affected by this vulnerability is an unknown functionality… |
CVE-2025-4152 | High | 7.3 | 2025-05-01 | A vulnerability classified as critical has been found in PHPGurukul Online Birth Certificate System 1.0. Affected is an unknown function of the file /admin/bwd… |
CVE-2025-4151 | High | 7.3 | 2025-05-01 | A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the f… |
CVE-2025-44194 | High | 7.3 | 2025-04-30 | SourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in /barangay_management/admin/?page=view_household. |
CVE-2025-44193 | High | 7.6 | 2025-04-30 | SourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in /barangay_management/admin/?page=view_complaint. |
CVE-2025-44192 | Critical | 9.8 | 2025-04-30 | SourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in /barangay_management/admin/?page=view_clearance. |
CVE-2025-45021 | Medium | 5.3 | 2025-04-30 | A SQL Injection vulnerability was identified in the admin/edit-directory.php file of the PHPGurukul Directory Management System v2.0. Attackers can exploit thi… |
CVE-2025-45019 | Medium | 5.4 | 2025-04-30 | A SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows… |
CVE-2025-45018 | Critical | 9.8 | 2025-04-30 | A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulner… |
CVE-2025-45017 | Critical | 9.8 | 2025-04-30 | A SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers… |
CVE-2025-45020 | High | 7.2 | 2025-04-30 | A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerabi… |
CVE-2025-4113 | Medium | 6.3 | 2025-04-30 | A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the f… |
CVE-2025-4112 | High | 7.3 | 2025-04-30 | A vulnerability was found in PHPGurukul Student Record System 3.20. It has been declared as critical. This vulnerability affects unknown code of the file /add-… |
CVE-2025-4111 | Medium | 6.3 | 2025-04-30 | A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/v… |
CVE-2025-4110 | Medium | 6.3 | 2025-04-30 | A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of th… |
CVE-2025-4109 | Medium | 6.3 | 2025-04-30 | A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown function… |
CVE-2025-4108 | High | 7.3 | 2025-04-30 | A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an unknown function of the file /add-subject… |
CVE-2025-2890 | Medium | 6.5 | 2025-04-30 | The tagDiv Opt-In Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘subscriptionCouponId’ parameter in all versions up to, and in… |
CVE-2025-4080 | Medium | 6.3 | 2025-04-29 | A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. Affected by this vulnerability is an unknown functional… |
CVE-2025-4074 | High | 7.3 | 2025-04-29 | A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown fun… |
CVE-2025-4073 | High | 7.3 | 2025-04-29 | A vulnerability was found in PHPGurukul Student Record System 3.20. It has been classified as critical. Affected is an unknown function of the file /change-pas… |
CVE-2025-4072 | Medium | 6.3 | 2025-04-29 | A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. This issue affects some unknown processing of the file /admi… |
CVE-2025-45956 | High | 8.8 | 2025-04-29 | A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arb… |
CVE-2025-4071 | High | 7.3 | 2025-04-29 | A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vulnerability affects unknown code of the f… |
CVE-2025-4070 | High | 7.3 | 2025-04-29 | A vulnerability, which was classified as critical, was found in PHPGurukul Rail Pass Management System 1.0. This affects an unknown part of the file /admin/cha… |
CVE-2025-40618 | Critical | 9.8 | 2025-04-29 | SQL injection vulnerability in Bookgy. This vulnerability could allow an attacker to retrieve, create, update and delete databases by sending an HTTP request t… |
CVE-2025-40617 | Critical | 9.8 | 2025-04-29 | SQL injection vulnerability in Bookgy. This vulnerability could allow an attacker to retrieve, create, update and delete databases by sending an HTTP request t… |
CVE-2025-25403 | Critical | 9.8 | 2025-04-29 | Slims (Senayan Library Management Systems) 9 Bulian V9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/coll_type.php. |
CVE-2025-4060 | High | 7.3 | 2025-04-29 | A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file… |
CVE-2025-4058 | High | 7.3 | 2025-04-29 | A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an unknown part of the file /Bloodgroop_proc… |
CVE-2025-4039 | High | 7.3 | 2025-04-28 | A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-4034 | High | 7.3 | 2025-04-28 | A vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-4033 | High | 7.3 | 2025-04-28 | A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. Affected is an unknown function of the file /pat… |
CVE-2025-4031 | High | 7.3 | 2025-04-28 | A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2025-4030 | High | 7.3 | 2025-04-28 | A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. This affects an unknown part of the file /se… |
CVE-2024-12706 | | 2025-04-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText™ Digital Asset Management. T he vulnerability c… | |
CVE-2025-4028 | High | 7.3 | 2025-04-28 | A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown fun… |
CVE-2025-4027 | High | 7.3 | 2025-04-28 | A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /adm… |
CVE-2025-4026 | High | 7.3 | 2025-04-28 | A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This issue affects some unknown proc… |
CVE-2025-4025 | High | 7.3 | 2025-04-28 | A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-4024 | High | 7.3 | 2025-04-28 | A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /add_drive.p… |
CVE-2025-4023 | High | 7.3 | 2025-04-28 | A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the fil… |
CVE-2025-4021 | Medium | 6.3 | 2025-04-28 | A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /… |
CVE-2025-4020 | High | 7.3 | 2025-04-28 | A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-4014 | High | 7.3 | 2025-04-28 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown funct… |
CVE-2025-4013 | High | 7.3 | 2025-04-28 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /adm… |
CVE-2025-4005 | High | 7.3 | 2025-04-28 | A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the… |
CVE-2025-4004 | High | 7.3 | 2025-04-28 | A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the… |
CVE-2025-3998 | High | 7.3 | 2025-04-28 | A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. This vulnerability affects unknown code of the file renew.php?i… |
CVE-2025-3976 | High | 7.3 | 2025-04-27 | A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file… |
CVE-2025-3974 | High | 7.3 | 2025-04-27 | A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vulnerability affects unknown code of the f… |
CVE-2025-3973 | High | 7.3 | 2025-04-27 | A vulnerability, which was classified as critical, was found in PHPGurukul COVID19 Testing Management System 1.0. This affects an unknown part of the file /che… |
CVE-2025-3972 | High | 7.3 | 2025-04-27 | A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown f… |
CVE-2025-3971 | High | 7.3 | 2025-04-27 | A vulnerability classified as critical was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionalit… |
CVE-2025-3968 | Medium | 6.3 | 2025-04-27 | A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vulnerability affects unknown code of the… |
CVE-2025-3957 | Medium | 6.3 | 2025-04-27 | A vulnerability was found in opplus springboot-admin 1.0 and classified as critical. This issue affects some unknown processing of the file \src\main\resources… |
CVE-2025-3956 | Medium | 6.3 | 2025-04-27 | A vulnerability has been found in 201206030 novel-cloud 1.4.0 and classified as critical. This vulnerability affects the function RestResp of the file novel-cl… |
CVE-2025-46578 | Medium | 6.5 | 2025-04-27 | There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and… |
CVE-2025-46577 | Medium | 6.5 | 2025-04-27 | There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract database information. |
CVE-2025-3955 | Medium | 6.3 | 2025-04-27 | A vulnerability, which was classified as critical, was found in codeprojects Patient Record Management System 1.0. This affects an unknown part of the file /ed… |
CVE-2025-25775 | Critical | 9.8 | 2025-04-25 | Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tiket/cekorder. |
CVE-2025-28076 | Medium | 6.5 | 2025-04-25 | Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.4 and CO2Scope <= 1.3.4 allows remote authenticated attackers to execute arbitrary SQL comman… |
CVE-2025-46546 | Low | 3.5 | 2025-04-25 | In Sherpa Orchestrator 141851, multiple time-based blind SQL injections can be performed by an authenticated user. This affects api/gui/asset/list, /api/gui/fi… |
CVE-2025-29529 | Medium | 6.5 | 2025-04-24 | ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx. |
CVE-2025-46248 | Critical | 9.3 | 2025-04-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard al… |
CVE-2025-39377 | High | 8.5 | 2025-04-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs Appsero Helper appsero-helper allows SQL Injection… |
CVE-2025-44135 | Medium | 6.5 | 2025-04-24 | A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 in /Scheduling/pages/profile_update.php. Manipulating the parameter user… |
CVE-2025-44134 | Medium | 6.5 | 2025-04-24 | A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/class_save.php. Manipulation of parameter… |
CVE-2025-3872 | High | 7.2 | 2025-04-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon centreon-web (User configuration form modules) a… |
CVE-2025-3280 | Medium | 6.5 | 2025-04-24 | The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value_filter' para… |
CVE-2025-1520 | High | 8.0 | 2025-04-23 | PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary… |
CVE-2025-32969 | Critical | 9.8 | 2025-04-23 | XWiki is a generic wiki platform. In versions starting from 1.8 and prior to 15.10.16, 16.4.6, and 16.10.1, it is possible for a remote unauthenticated user to… |
CVE-2025-32968 | High | 8.8 | 2025-04-23 | XWiki is a generic wiki platform. In versions starting from 1.6-milestone-1 to before 15.10.16, 16.4.6, and 16.10.1, it is possible for a user with SCRIPT righ… |
CVE-2025-43949 | Critical | 9.8 | 2025-04-22 | MuM (aka Mensch und Maschine) MapEdit (aka mapedit-web) 24.2.3 is vulnerable to SQL Injection that allows an attacker to execute malicious SQL statements that… |
CVE-2023-44755 | Critical | 9.8 | 2025-04-22 | Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php. |
CVE-2025-3767 | High | 7.2 | 2025-04-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon BAM (Boolean KPi Listing modules) allows SQL Inj… |
CVE-2025-23176 | High | 8.8 | 2025-04-22 | CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CVE-2025-46252 | High | 7.6 | 2025-04-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kofi Mokome Message Filter for Contact Form 7 allows SQL… |
CVE-2025-46242 | High | 7.6 | 2025-04-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Watu Quiz watu allows SQL Injection.This issue affect… |
CVE-2025-3856 | Medium | 6.3 | 2025-04-22 | A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been classified as critical. This affects the function searchByPage of the file /book/searchByPag… |
CVE-2025-3847 | High | 7.3 | 2025-04-21 | A vulnerability classified as critical has been found in markparticle WebServer up to 1.0. This affects an unknown part of the file code/http/httprequest.cpp o… |
CVE-2025-3846 | High | 7.3 | 2025-04-21 | A vulnerability was found in markparticle WebServer up to 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2025-32956 | High | 8.0 | 2025-04-21 | ManageWiki is a MediaWiki extension allowing users to manage wikis. Versions before commit f504ed8, are vulnerable to SQL injection when renaming a namespace i… |