CWE-89 · SQL Injection (page 67)
Page 67 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3696 | Medium | 6.3 | 2025-04-16 | A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of… |
CVE-2025-3694 | High | 7.3 | 2025-04-16 | A vulnerability classified as critical has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the c… |
CVE-2025-3690 | High | 7.3 | 2025-04-16 | A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /adm… |
CVE-2025-3689 | High | 7.3 | 2025-04-16 | A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /a… |
CVE-2025-39566 | High | 7.6 | 2025-04-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Hostel hostel allows Blind SQL Injection.This issue a… |
CVE-2025-39518 | High | 7.6 | 2025-04-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RedefiningTheWeb BMA Lite bma-lite-appointment-booking-an… |
CVE-2025-1981 | | 2025-04-16 | Improper neutralization of input provided by a low-privileged user into a file search functionality in Ready_'s Invoices module allows for SQL Injection attack… | |
CVE-2025-3685 | Medium | 6.3 | 2025-04-16 | A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file /edit_… |
CVE-2025-3684 | Medium | 6.3 | 2025-04-16 | A vulnerability was found in Xianqi Kindergarten Management System 2.0 Bulid 20190808. It has been rated as critical. This issue affects some unknown processin… |
CVE-2025-3676 | Medium | 6.3 | 2025-04-16 | A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0. This affects an unknown part of the file /api/front/search/books. The manipu… |
CVE-2025-27892 | Medium | 6.8 | 2025-04-15 | Shopware prior to version 6.5.8.13 is affected by a SQL injection vulnerability in the /api/search/order endpoint. NOTE: this issue exists because of a CVE-202… |
CVE-2025-26908 | High | 7.6 | 2025-04-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gurmehub Kargo Entegratör kargo-entegrator allows SQL Inj… |
CVE-2025-28100 | Critical | 9.8 | 2025-04-15 | A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.ph… |
CVE-2025-28198 | Medium | 5.9 | 2025-04-15 | A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController… |
CVE-2020-18243 | Medium | 6.5 | 2025-04-15 | SQL injection vulnerability found in Enricozab CMS v.1.0 allows a remote attacker to execute arbitrary code via /hdo/hdo-view-case.php. |
CVE-2025-32993 | Medium | 6.5 | 2025-04-15 | Vision Helpdesk through 5.7.0 allows Time-Based Blind SQL injection via the Forgot Password (aka index.php?/home/forgot-password) vis_username parameter. Authe… |
CVE-2025-3470 | Medium | 4.9 | 2025-04-15 | The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the s parameter in all versions up to, and in… |
CVE-2025-3589 | Medium | 6.3 | 2025-04-14 | A vulnerability, which was classified as critical, was found in SourceCodester Music Class Enrollment System 1.0. Affected is an unknown function of the file /… |
CVE-2025-22371 | | 2025-04-14 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SicommNet BASEC (SaaS Service) login page allows an unaut… | |
CVE-2025-3571 | Medium | 6.3 | 2025-04-14 | A vulnerability was found in Fannuo Enterprise Content Management System 凡诺企业网站管理系统 1.1/4.0. It has been declared as critical. This vulnerability affects unkno… |
CVE-2025-3559 | Medium | 6.3 | 2025-04-14 | A vulnerability has been found in ghostxbh uzy-ssm-mall 1.0.0 and classified as critical. This vulnerability affects the function ForeProductListController of… |
CVE-2025-3553 | Medium | 6.3 | 2025-04-14 | A vulnerability was found in phpshe 1.8. It has been declared as critical. This vulnerability affects the function pe_delete of the file /admin.php?mod=brand&a… |
CVE-2025-3534 | Medium | 6.3 | 2025-04-13 | A vulnerability, which was classified as critical, was found in PowerCreator CMS 1.0. Affected is an unknown function of the file /OpenPublicCourse.aspx. The m… |
CVE-2025-2128 | Medium | 6.5 | 2025-04-11 | The Cost Calculator Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_ids’ parameter in all versions up to, and including… |
CVE-2025-32681 | High | 8.5 | 2025-04-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Guru Error Log Viewer error-log-viewer-wp allows Blind… |
CVE-2025-32650 | High | 8.5 | 2025-04-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ability, Inc Accessibility Suite online-accessibility all… |
CVE-2025-32618 | High | 8.5 | 2025-04-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins Wishlist wishlist allows SQL Injection.This i… |
CVE-2025-32603 | Critical | 9.3 | 2025-04-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HK WP Online Users Stats wp-online-users-stats allows Bli… |
CVE-2025-32567 | High | 8.5 | 2025-04-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in dev02ali Easy Post Duplicator easy-post-duplicator allows… |
CVE-2025-32565 | Critical | 9.3 | 2025-04-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vertim Neon Product Designer neon-product-designer-for-wo… |
CVE-2025-32558 | High | 8.5 | 2025-04-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ketanajani Duplicate Title Checker duplicate-title-checke… |
CVE-2025-31599 | Critical | 9.3 | 2025-04-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in N-Media Bulk Product Sync sync-wc-google allows SQL Injec… |
CVE-2025-31565 | Critical | 9.3 | 2025-04-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lisandro Martinez WPSmartContracts wp-smart-contracts all… |
CVE-2025-32687 | High | 8.5 | 2025-04-10 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Magnigenie Review Stars Count For WooCommerce review-star… |
CVE-2025-32128 | High | 7.6 | 2025-04-10 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in aaronfrey Nearby Locations nearby-locations allows SQL In… |
CVE-2025-32119 | High | 8.2 | 2025-04-10 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CardGate CardGate Payments for WooCommerce cardgate allow… |
CVE-2024-13909 | Medium | 4.9 | 2025-04-10 | The Accredible Certificates & Open Badges plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and… |
CVE-2025-32685 | High | 7.6 | 2025-04-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aristo Rinjuang WP Inquiries wp-inquiries allows SQL Inje… |
CVE-2025-32677 | High | 7.6 | 2025-04-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in solwininfotech WP Social Stream Designer social-stream-de… |
CVE-2025-32676 | High | 7.6 | 2025-04-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Picture-Planet GmbH Verowa Connect verowa-connect allows… |
CVE-2025-32550 | High | 7.2 | 2025-04-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickandPledge Click & Pledge Connect Plugin allows SQL I… |
CVE-2025-29391 | High | 7.2 | 2025-04-09 | horvey Library-Manager v1.0 is vulnerable to SQL Injection in Admin/Controller/BookController.class.php. |
CVE-2025-29390 | High | 8.8 | 2025-04-09 | jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the set_password function in application/controllers/home.php. |
CVE-2025-29189 | High | 7.6 | 2025-04-09 | Flowise <= 2.2.3 is vulnerable to SQL Injection. via tableName parameter at Postgres_VectorStores. |
CVE-2017-20197 | High | 7.3 | 2025-04-09 | A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerab… |
CVE-2025-25226 | Critical | 9.8 | 2025-04-08 | Improper handling of identifiers lead to a SQL injection vulnerability in the quoteNameStr method of the database package. Please note: the affected method is… |
CVE-2025-32020 | | 2025-04-08 | The crud-query-parser library parses query parameters from HTTP requests and converts them to database queries. Improper neutralization of the order/sort param… | |
CVE-2025-22461 | High | 7.2 | 2025-04-08 | SQL injection in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote authenticated attacker with admin privileges to ach… |
CVE-2025-3436 | Medium | 6.5 | 2025-04-08 | The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'order' and 'orderby' parameters in all versions u… |
CVE-2025-3430 | Medium | 4.9 | 2025-04-08 | The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'printer_text' parameter in all versions up to, and including, 2.1.3.6 due to insu… |
CVE-2025-3429 | Medium | 4.9 | 2025-04-08 | The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'material_text' parameter in all versions up to, and including, 2.1.3.6 due to ins… |
CVE-2025-3428 | Medium | 4.9 | 2025-04-08 | The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'coating_text' parameter in all versions up to, and including, 2.1.3.6 due to insu… |
CVE-2025-3427 | Medium | 4.9 | 2025-04-08 | The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'infill_text' parameter in all versions up to, and including, 2.1.3.6 due to insuf… |
CVE-2019-25223 | Medium | 4.9 | 2025-04-08 | The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0… |
CVE-2025-3402 | Medium | 6.3 | 2025-04-08 | A vulnerability was found in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform 5.5.2 and classified as critical. This issue affects some unknown pro… |
CVE-2025-3401 | High | 7.3 | 2025-04-08 | A vulnerability has been found in ESAFENET CDG 5.6.3.154.205_20250114 and classified as critical. This vulnerability affects unknown code of the file /paramete… |
CVE-2025-3400 | High | 7.3 | 2025-04-08 | A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. This affects an unknown part of the file /client/UnChkMail… |
CVE-2025-3399 | High | 7.3 | 2025-04-08 | A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5.6.3.154.205_20250114. Affected by this issue is some unknown functionality… |
CVE-2025-0942 | High | 8.6 | 2025-04-07 | The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows for unauthenticated… |
CVE-2025-3384 | High | 7.3 | 2025-04-07 | A vulnerability was found in 1000 Projects Human Resource Management System 1.0. It has been classified as critical. Affected is an unknown function of the fil… |
CVE-2025-3383 | High | 7.3 | 2025-04-07 | A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0 and classified as critical. This issue affects some unknown proces… |
CVE-2025-3382 | Medium | 6.3 | 2025-04-07 | A vulnerability has been found in joey-zhou xiaozhi-esp32-server-java up to a14fe8115842ee42ab5c7a51706b8a85db5200b7 and classified as critical. This vulnerabi… |
CVE-2025-3370 | High | 7.3 | 2025-04-07 | A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unknown part of the file /admin/admin-prof… |
CVE-2025-3369 | Medium | 6.3 | 2025-04-07 | A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /novel/f… |
CVE-2025-3353 | High | 7.3 | 2025-04-07 | A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/ad… |
CVE-2025-3352 | High | 7.3 | 2025-04-07 | A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-3351 | High | 7.3 | 2025-04-07 | A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functi… |
CVE-2025-3350 | High | 7.3 | 2025-04-07 | A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /adm… |
CVE-2025-3348 | Medium | 6.3 | 2025-04-07 | A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. This vulnerability affects unknown code of the file /ed… |
CVE-2025-3347 | Medium | 6.3 | 2025-04-07 | A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /dental_p… |
CVE-2025-3345 | High | 7.3 | 2025-04-07 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unkno… |
CVE-2025-3344 | High | 7.3 | 2025-04-07 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. Affected is an unknown function of the f… |
CVE-2025-30473 | High | 8.8 | 2025-04-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow Common SQL Provider. When using the parti… |
CVE-2025-3343 | High | 7.3 | 2025-04-07 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the… |
CVE-2025-3342 | High | 7.3 | 2025-04-07 | A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of t… |
CVE-2025-3341 | High | 7.3 | 2025-04-07 | A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. This affects an unknown part of the file… |
CVE-2025-3340 | High | 7.3 | 2025-04-07 | A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. Affected by this issue is some unkno… |
CVE-2025-3339 | High | 7.3 | 2025-04-07 | A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. Affected by this vulnerability is an unknown function… |
CVE-2025-3338 | High | 7.3 | 2025-04-07 | A vulnerability classified as critical has been found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the file /adm… |
CVE-2025-3337 | High | 7.3 | 2025-04-07 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of… |
CVE-2025-3336 | High | 7.3 | 2025-04-07 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of… |
CVE-2025-3335 | High | 7.3 | 2025-04-07 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file… |
CVE-2025-3334 | High | 7.3 | 2025-04-07 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functional… |
CVE-2025-3333 | High | 7.3 | 2025-04-07 | A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2025-3332 | High | 7.3 | 2025-04-07 | A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the fi… |
CVE-2025-3331 | High | 7.3 | 2025-04-07 | A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. This issue affects some unknown proc… |
CVE-2025-3330 | High | 7.3 | 2025-04-07 | A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. This vulnerability affects unknown code of the file /… |
CVE-2025-3323 | Medium | 6.3 | 2025-04-06 | A vulnerability classified as critical was found in godcheese/code-projects Nimrod 0.8. Affected by this vulnerability is the function searchAllByName of the f… |
CVE-2025-3318 | Medium | 6.3 | 2025-04-06 | A vulnerability classified as critical was found in Kenj_Frog 肯尼基蛙 company-financial-management 公司财务管理系统 1.0. Affected by this vulnerability is the function pa… |
CVE-2025-3316 | High | 7.3 | 2025-04-06 | A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2025-3315 | High | 7.3 | 2025-04-06 | A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this issue is some unknown function… |
CVE-2025-3314 | High | 7.3 | 2025-04-06 | A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this vulnerability is an unkno… |
CVE-2025-3313 | High | 7.3 | 2025-04-06 | A vulnerability, which was classified as critical, was found in PHPGurukul Men Salon Management System 1.0. Affected is an unknown function of the file /admin/… |
CVE-2025-3312 | High | 7.3 | 2025-04-06 | A vulnerability, which was classified as critical, has been found in PHPGurukul Men Salon Management System 1.0. This issue affects some unknown processing of… |
CVE-2025-3311 | High | 7.3 | 2025-04-06 | A vulnerability classified as critical was found in PHPGurukul Men Salon Management System 1.0. This vulnerability affects unknown code of the file /admin/abou… |
CVE-2025-3310 | High | 7.3 | 2025-04-06 | A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the file /admin/delete… |
CVE-2025-3309 | High | 7.3 | 2025-04-06 | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionalit… |
CVE-2025-1264 | Medium | 6.5 | 2025-04-06 | The Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links plugin for WordPress is vulnerable to SQL Injection via the 'orderBy' parame… |
CVE-2025-3308 | High | 7.3 | 2025-04-06 | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown fun… |
CVE-2025-3307 | High | 7.3 | 2025-04-06 | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /r… |