CWE-89 · SQL Injection (page 7)
Page 7 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-15134 | High | 7.3 | 2026-07-09 | A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /… |
CVE-2026-39179 | Medium | 6.3 | 2026-07-08 | A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via the newPassword parameter in the passwor… |
CVE-2026-39178 | Medium | 6.3 | 2026-07-08 | A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via the search parameter of the allContactSe… |
CVE-2026-9074 | Critical | 9.1 | 2026-07-08 | IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functiona… |
CVE-2026-15067 | High | 8.8 | 2026-07-08 | Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input co… |
CVE-2026-15062 | Critical | 9.6 | 2026-07-08 | SQL injection vulnerabilities in the Snowflake Snowpark Python SDK (snowpark-python) versions prior to 1.53.0 could allow authenticated low-privilege users to… |
CVE-2026-59257 | High | 8.8 | 2026-07-08 | n8n before 1.123.61, 2.x before 2.27.4, and 2.28.x before 2.28.1 contains a SQL injection vulnerability in the legacy MySQL v1 node's executeQuery operation. T… |
CVE-2026-8307 | Critical | 9.8 | 2026-07-08 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Webbeyaz Web Design Mediküm Web allows SQL Injection. Th… |
CVE-2026-6854 | High | 7.5 | 2026-07-08 | The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'mc_auth' parameter in all versions up… |
CVE-2026-6230 | High | 7.5 | 2026-07-08 | The Tainacan plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'geoquery' parameter in all versions up to and including 1.0.3 due to… |
CVE-2026-12936 | Medium | 4.9 | 2026-07-08 | The Recurio – Ultimate Subscription for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'data' parameter in all versions up to… |
CVE-2026-9700 | High | 7.5 | 2026-07-08 | The Eventer plugin for WordPress is vulnerable to time-based SQL Injection via the ‘code’ parameter in all versions up to, and including, 4.4.2 due to insuffic… |
CVE-2026-55635 | | 2026-07-07 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, chart quota and Y-axis filters embed attacker-controlled filter values direc… | |
CVE-2026-33734 | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have a SQL injection vulnerability in the `Massmailer` mo… | |
CVE-2026-14471 | High | 8.1 | 2026-07-06 | Improper Neutralization of Special Elements in the metrics-service retention policy management component in Amazon mcp-gateway-registry before 1.0.13 might all… |
CVE-2026-14809 | High | 7.5 | 2026-07-06 | Prog Management System developed by PROG MIS has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to r… |
CVE-2026-14799 | Medium | 6.3 | 2026-07-06 | A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. Impacted is an unknown function of the file /customer/my_account.php?my_wishlist. The m… |
CVE-2026-14798 | Medium | 6.3 | 2026-07-06 | A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. This issue affects some unknown processing of the file /apartment-visitor/… |
CVE-2026-14797 | Medium | 6.3 | 2026-07-06 | A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. This vulnerability affects unknown code of the file /apartment-visitor/edi… |
CVE-2026-14796 | Medium | 6.3 | 2026-07-06 | A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Perform… |
CVE-2026-14795 | Medium | 6.3 | 2026-07-06 | A vulnerability has been found in CodeAstro Apartment Visitor Management System 1.0. Affected by this issue is some unknown functionality of the file /apartmen… |
CVE-2026-14774 | Medium | 6.3 | 2026-07-05 | A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /paymentdischarge.php. This manipul… |
CVE-2026-14773 | Medium | 6.3 | 2026-07-05 | A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /payment.php. The manipulation of the ar… |
CVE-2026-14772 | High | 7.3 | 2026-07-05 | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0/1.php. The impacted element is an unknown function of the file /edit_cou… |
CVE-2026-14771 | High | 7.3 | 2026-07-05 | A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0/1.php. The affected element is an unknown function of the file /edit_exam1.php. E… |
CVE-2026-14770 | High | 7.3 | 2026-07-05 | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_room.php. Performing a… |
CVE-2026-14769 | High | 7.3 | 2026-07-05 | A security vulnerability has been detected in code-projects Real State Services 1.0. This issue affects some unknown processing of the file /pay.php. Such mani… |
CVE-2026-14768 | High | 7.3 | 2026-07-05 | A weakness has been identified in code-projects Real State Services 1.0. This vulnerability affects unknown code of the file /builderHome.php. This manipulatio… |
CVE-2026-14767 | Medium | 6.3 | 2026-07-05 | A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. This affects an unknown part of the file /ecommerce-website-php/customer/confirm.php of… |
CVE-2026-14766 | Medium | 6.3 | 2026-07-05 | A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this issue is some unknown functionality of the file /apartmen… |
CVE-2026-14764 | High | 7.3 | 2026-07-05 | A vulnerability has been found in code-projects Hotel and Tourism Reservation 1.0. This impacts an unknown function of the file /admin/add_event.php of the com… |
CVE-2026-14763 | High | 7.3 | 2026-07-05 | A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. This affects an unknown function of the file /admin/tour_reserves.php of the componen… |
CVE-2026-14762 | High | 7.3 | 2026-07-05 | A vulnerability was detected in code-projects Hotel and Tourism Reservation 1.0. The impacted element is an unknown function of the file /admin/rooms.php of th… |
CVE-2026-14756 | High | 7.3 | 2026-07-05 | A vulnerability was found in code-projects Hotel and Tourism Reservation 1.0. Affected by this issue is some unknown functionality of the file /admin/add_tour… |
CVE-2026-14755 | High | 7.3 | 2026-07-05 | A vulnerability has been found in code-projects Hotel and Tourism Reservation 1.0. Affected by this vulnerability is an unknown functionality of the file /admi… |
CVE-2026-14754 | High | 7.3 | 2026-07-05 | A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. Affected is an unknown function of the file /admin/add_room.php. Executing a manipula… |
CVE-2026-14751 | Medium | 6.3 | 2026-07-05 | A weakness has been identified in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. The impacted element is the function Notes_controller::se… |
CVE-2026-14750 | High | 7.3 | 2026-07-05 | A security flaw has been discovered in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. The affected element is the function Notes_controlle… |
CVE-2026-14747 | High | 7.3 | 2026-07-05 | A vulnerability was detected in code-projects Real State Services 1.0. Affected by this vulnerability is an unknown functionality of the file /addprojectsale.p… |
CVE-2026-14746 | High | 7.3 | 2026-07-05 | A security vulnerability has been detected in code-projects Real State Services 1.0. Affected is an unknown function of the file /addprojectrent.php. The manip… |
CVE-2026-14745 | High | 7.3 | 2026-07-05 | A weakness has been identified in code-projects Real State Services 1.0. This impacts an unknown function of the file /single-list_rent.php. Executing a manipu… |
CVE-2026-14744 | High | 7.3 | 2026-07-05 | A security flaw has been discovered in code-projects Real State Services 1.0. This affects an unknown function of the file /normalHomeRent.php. Performing a ma… |
CVE-2026-14743 | High | 7.3 | 2026-07-05 | A vulnerability was identified in code-projects Real State Services 1.0. The impacted element is an unknown function of the file /normalHomeSale.php. Such mani… |
CVE-2026-14737 | High | 7.3 | 2026-07-05 | A vulnerability was identified in Hanwang e-Face General Management Platform 6.3.5.4. This impacts an unknown function of the file /sysAuthStr/querySysAuthStr… |
CVE-2026-14735 | High | 7.3 | 2026-07-05 | A vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such… |
CVE-2026-14734 | High | 7.3 | 2026-07-05 | A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_product.php. This manipulation… |
CVE-2026-14733 | High | 7.3 | 2026-07-05 | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /edit_coursea.php… |
CVE-2026-14732 | High | 7.3 | 2026-07-05 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /edit_e… |
CVE-2026-14731 | Medium | 6.3 | 2026-07-05 | A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /patientreport.php. Executing a manipul… |
CVE-2026-14730 | Medium | 6.3 | 2026-07-05 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /patientpr… |
CVE-2026-14717 | Medium | 6.3 | 2026-07-05 | A vulnerability was detected in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /patientlogin.php. Perform… |
CVE-2026-14713 | High | 7.3 | 2026-07-05 | A security flaw has been discovered in SourceCodester Pizzafy E-Commerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action… |
CVE-2026-14706 | Medium | 6.3 | 2026-07-05 | A vulnerability was identified in code-projects Online Examination 1.0. This affects an unknown part of the file /update.php?q=addquiz of the component Quiz Cr… |
CVE-2026-14705 | High | 7.3 | 2026-07-05 | A vulnerability was determined in code-projects Online Examination 1.0. Affected by this issue is some unknown functionality of the file head.php. Executing a… |
CVE-2026-14703 | Medium | 6.3 | 2026-07-05 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /patientorder.php. Such manipulation… |
CVE-2026-14701 | Medium | 6.3 | 2026-07-05 | A vulnerability was detected in code-projects Internship Management System 1.0. This affects an unknown function of the file employer/details/change_password.p… |
CVE-2026-14700 | High | 7.3 | 2026-07-05 | A security vulnerability has been detected in code-projects Internship Management System 1.0. The impacted element is an unknown function of the file employer/… |
CVE-2026-14695 | High | 7.3 | 2026-07-05 | A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_client of the file classes/Users… |
CVE-2026-14694 | Medium | 6.3 | 2026-07-05 | A vulnerability has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this issue is the function cancel_order of the… |
CVE-2026-14692 | Medium | 6.3 | 2026-07-05 | A vulnerability was detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26. Affected is the function save_shop_type of the file cl… |
CVE-2026-14689 | Medium | 6.3 | 2026-07-05 | A security flaw has been discovered in CodeAstro Apartment Visitor Management System 1.0. The impacted element is an unknown function of the file /apartment-vi… |
CVE-2026-14688 | High | 7.3 | 2026-07-05 | A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. The affected element is an unknown function of the file /admin/login.php. Th… |
CVE-2026-14660 | High | 7.3 | 2026-07-04 | A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file login.php. Performing a manipulation… |
CVE-2026-14659 | Medium | 6.3 | 2026-07-04 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /patientappointment.php. Such manipu… |
CVE-2026-14658 | Medium | 6.3 | 2026-07-04 | A vulnerability was detected in code-projects Assessment Management 1.0. This vulnerability affects unknown code of the file /lecturer/marking-scheme.php. The… |
CVE-2026-14657 | Medium | 6.3 | 2026-07-04 | A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file /lecturer/marking-scheme.php of the co… |
CVE-2026-14654 | High | 7.3 | 2026-07-04 | A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdelet… |
CVE-2026-14653 | High | 7.3 | 2026-07-04 | A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdelet… |
CVE-2026-14652 | High | 7.3 | 2026-07-04 | A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the comp… |
CVE-2026-14649 | High | 7.3 | 2026-07-04 | A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the function test_input of the file /saveVote.php. Performing a manipulatio… |
CVE-2026-14648 | High | 7.3 | 2026-07-04 | A security vulnerability has been detected in code-projects Online Voting System up to 0.x/1.0. This issue affects the function test_input of the file /authent… |
CVE-2026-14642 | High | 7.3 | 2026-07-04 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /edit_… |
CVE-2026-14641 | High | 7.3 | 2026-07-04 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2026-14640 | High | 7.3 | 2026-07-04 | A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /index.php of the component Login… |
CVE-2026-14639 | Medium | 6.3 | 2026-07-04 | A vulnerability has been found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /ecommerce-website-php/customer/my_account.php?… |
CVE-2026-14638 | Medium | 6.3 | 2026-07-04 | A flaw has been found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /patient.php. This manipulation of the argum… |
CVE-2026-14619 | Medium | 6.3 | 2026-07-04 | A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /medicine.php. This mani… |
CVE-2026-4321 | Critical | 9.8 | 2026-07-03 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Raera - Ankara Web Design and Digital Advertising Agency… |
CVE-2026-12920 | Medium | 4.9 | 2026-07-03 | The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to… |
CVE-2026-9272 | High | 8.1 | 2026-07-02 | In Progress Flowmon ADS versions prior to 12.5.6 and 13.0.5, a vulnerability exists whereby an adversary who is authenticated as a low-privileged user in the A… |
CVE-2026-56841 | High | 8.8 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application t… |
CVE-2026-54404 | High | 8.8 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to esca… |
CVE-2026-50747 | Critical | 9.9 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Appli… |
CVE-2026-57765 | High | 8.5 | 2026-07-02 | Contributor SQL Injection in WP EasyCart <= 5.9.0 versions. |
CVE-2026-57756 | High | 8.5 | 2026-07-02 | Contributor SQL Injection in nicen-localize-image <= 1.4.9 versions. |
CVE-2026-57752 | High | 8.5 | 2026-07-02 | Contributor SQL Injection in iNET Webkit 1.2.4 versions. |
CVE-2026-57687 | High | 8.5 | 2026-07-02 | Contributor SQL Injection in Custom Field Template <= 2.7.8 versions. |
CVE-2026-57683 | Critical | 9.3 | 2026-07-02 | Unauthenticated SQL Injection in WP Fast Total Search <= 1.80.280 versions. |
CVE-2026-57679 | Critical | 9.3 | 2026-07-02 | Unauthenticated SQL Injection in GeekyBot <= 1.2.5 versions. |
CVE-2025-69094 | High | 8.5 | 2026-07-02 | Subscriber SQL Injection in Unicamp <= 2.2.2 versions. |
CVE-2026-8441 | High | 7.5 | 2026-07-02 | The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'notinstring' parameter of the wprp_load_more_revs AJAX action in versions… |
CVE-2026-14029 | Medium | 6.5 | 2026-07-02 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via the 'select' parameter in all versi… |
CVE-2026-13357 | Medium | 4.9 | 2026-07-02 | The Houzez Property Feed plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.5.46 due to in… |
CVE-2026-52186 | Critical | 9.8 | 2026-07-01 | SQL Injection vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to execute arbitrary code via the gohead/sub_463bbc component |
CVE-2026-14363 | Critical | 9.8 | 2026-07-01 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allo… |
CVE-2026-58521 | Critical | 9.8 | 2026-07-01 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allo… |
CVE-2026-51946 | Medium | 6.5 | 2026-07-01 | SQL Injection vulnerability in GoAdminGroup GoAdmin (last release v1.2.26) allows a remote attacker to execute arbitrary code and obtain sensitive information… |
CVE-2026-34105 | Critical | 9.8 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in translate_text.php (line 15): SELECT id, filename, extension, ty… |
CVE-2026-34104 | Critical | 9.8 | 2026-07-01 | Guardian language-system passes the name GET parameter directly into an unsanitized SQL query in designer.php (line 124): SELECT * FROM complex WHERE name='\"… |
CVE-2026-34103 | Critical | 9.8 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in subtitles.php (line 16): SELECT id, filename, extension, type FR… |