CWE-89 · SQL Injection (page 73)
Page 73 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-50823 | Critical | 9.8 | 2024-11-14 | A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and password parameters. |
CVE-2024-50835 | High | 7.2 | 2024-11-14 | A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parame… |
CVE-2024-50834 | High | 7.2 | 2024-11-14 | A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters. |
CVE-2024-50833 | Critical | 9.8 | 2024-11-14 | A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the username and password parameters. |
CVE-2024-50832 | High | 7.2 | 2024-11-14 | A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning Management System Project 1.0 via the class_name parameter. |
CVE-2024-11213 | Medium | 4.7 | 2024-11-14 | A vulnerability, which was classified as critical, was found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /a… |
CVE-2024-11212 | Medium | 6.3 | 2024-11-14 | A vulnerability, which was classified as critical, has been found in SourceCodester Best Employee Management System 1.0. Affected by this issue is some unknown… |
CVE-2024-9186 | High | 8.6 | 2024-11-14 | The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit WordPress plugin before 3.3.0 does not sanitize and es… |
CVE-2024-45876 | Medium | 6.5 | 2024-11-13 | The login form of baltic-it TOPqw Webportal v1.35.283.2 (fixed in version 1.35.283.4) at /Apps/TOPqw/Login.aspx is vulnerable to SQL injection. The vulnerabili… |
CVE-2024-45875 | Medium | 5.4 | 2024-11-13 | The create user function in baltic-it TOPqw Webportal 1.35.287.1 (fixed in version1.35.291), in /Apps/TOPqw/BenutzerManagement.aspx/SaveNewUser, is vulnerable… |
CVE-2024-39368 | High | 8.0 | 2024-11-13 | Improper neutralization of special elements used in an SQL command ('SQL Injection') in some Intel(R) Neural Compressor software before version v3.0 may allow… |
CVE-2024-40443 | Medium | 4.3 | 2024-11-13 | SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to cause a denial of service via the dele… |
CVE-2024-50972 | High | 7.2 | 2024-11-13 | A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via… |
CVE-2024-50971 | High | 7.2 | 2024-11-13 | A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the… |
CVE-2024-50970 | High | 8.8 | 2024-11-13 | A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands… |
CVE-2024-37376 | High | 7.2 | 2024-11-13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with… |
CVE-2024-34784 | High | 7.2 | 2024-11-13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with… |
CVE-2024-34782 | High | 7.2 | 2024-11-13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with… |
CVE-2024-34781 | High | 7.2 | 2024-11-13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with… |
CVE-2024-34780 | High | 7.2 | 2024-11-13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with… |
CVE-2024-32847 | High | 7.2 | 2024-11-13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with… |
CVE-2024-32844 | High | 7.2 | 2024-11-13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with… |
CVE-2024-32841 | High | 7.2 | 2024-11-13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with… |
CVE-2024-32839 | High | 7.2 | 2024-11-13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with… |
CVE-2024-50330 | Critical | 9.8 | 2024-11-12 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to… |
CVE-2024-50328 | High | 7.2 | 2024-11-12 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with… |
CVE-2024-50327 | High | 7.2 | 2024-11-12 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with… |
CVE-2024-50326 | High | 7.2 | 2024-11-12 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with… |
CVE-2024-50323 | High | 7.8 | 2024-11-12 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to a… |
CVE-2024-43415 | Critical | 9.0 | 2024-11-12 | An improper neutralization of special elements used in an SQL command in the papertrail/version- model of the decidim_awesome-module <= v0.11.1 (> 0.9.0) allow… |
CVE-2024-11127 | Medium | 6.3 | 2024-11-12 | A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functional… |
CVE-2024-11124 | Medium | 4.7 | 2024-11-12 | A vulnerability has been found in TimGeyssens UIOMatic 5 and classified as critical. This vulnerability affects unknown code of the file /src/UIOMatic/wwwroot/… |
CVE-2024-11121 | Medium | 6.3 | 2024-11-12 | A vulnerability classified as critical was found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. Affected by this vulnerability is an unknown functionality of the… |
CVE-2024-11101 | Medium | 4.7 | 2024-11-12 | A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been classified as critical. Affected is an unknown function of the fil… |
CVE-2024-11100 | High | 7.3 | 2024-11-12 | A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown… |
CVE-2024-11099 | High | 7.3 | 2024-11-12 | A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. T… |
CVE-2024-11096 | Medium | 6.3 | 2024-11-12 | A vulnerability, which was classified as critical, was found in code-projects Task Manager 1.0. This affects an unknown part of the file /newProject.php. The m… |
CVE-2024-44546 | Critical | 9.8 | 2024-11-11 | Powerjob >= 3.20 is vulnerable to SQL injection via the version parameter. |
CVE-2024-11077 | High | 7.3 | 2024-11-11 | A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The… |
CVE-2024-11076 | Medium | 6.3 | 2024-11-11 | A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file… |
CVE-2024-11074 | Medium | 6.3 | 2024-11-11 | A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. This vulnerability affects unknown code of the file /incadd.p… |
CVE-2024-50989 | Critical | 9.8 | 2024-11-11 | A SQL injection vulnerability in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System v1.0 allows an attacker to execute arbitrary SQL comm… |
CVE-2024-11020 | Critical | 9.8 | 2024-11-11 | Webopac from Grand Vice info has a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and d… |
CVE-2024-11016 | Critical | 9.8 | 2024-11-11 | Webopac from Grand Vice info has a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and d… |
CVE-2024-51882 | High | 8.5 | 2024-11-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopalkumar315 Gboy Custom Google Map gboy-custom-google-m… |
CVE-2024-51845 | High | 8.5 | 2024-11-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in richteam Share Buttons – Social Media rich-web-share-butt… |
CVE-2024-51843 | High | 8.5 | 2024-11-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in fruitcakestudios Horsemanager fruitcake-horsemanager allo… |
CVE-2024-51837 | High | 8.5 | 2024-11-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sophia M Williams WP Contest wp-contest allows SQL Inject… |
CVE-2024-51820 | High | 8.5 | 2024-11-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wplsquared L Squared Hub WP l-squared-hub-wp-virtual-devi… |
CVE-2024-11060 | Medium | 6.3 | 2024-11-11 | A vulnerability classified as critical has been found in Jinher Network Collaborative Management Platform 金和数字化智能办公平台 1.0. Affected is an unknown function of t… |
CVE-2024-11059 | Medium | 6.3 | 2024-11-11 | A vulnerability was found in Project Worlds Free Download Online Shopping System up to 192.168.1.88. It has been rated as critical. This issue affects some unk… |
CVE-2024-11058 | Medium | 4.7 | 2024-11-10 | A vulnerability was found in CodeAstro Real Estate Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of th… |
CVE-2024-11057 | High | 7.3 | 2024-11-10 | A vulnerability has been found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2024-11055 | High | 7.3 | 2024-11-10 | A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. This issue affects some unknown proces… |
CVE-2024-11051 | Medium | 6.3 | 2024-11-10 | A vulnerability was found in AMTT Hotel Broadband Operation System up to 3.0.3.151204. It has been classified as critical. Affected is an unknown function of t… |
CVE-2024-51608 | High | 8.5 | 2024-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in colinph970 AmaDiscount amadiscount allows SQL Injection.T… |
CVE-2024-51606 | High | 8.5 | 2024-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Blrt Blrt WP Embed blrt-wp-embed allows SQL Injection.Thi… |
CVE-2024-51623 | High | 8.5 | 2024-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mehral WP EIS wp-eis allows SQL Injection.This issue affe… |
CVE-2024-50544 | High | 8.5 | 2024-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue… |
CVE-2024-50539 | High | 8.5 | 2024-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in lodgix Lodgix.com Vacation Rental Website Builder lodgixc… |
CVE-2024-50524 | High | 8.5 | 2024-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Quý Lê 91 Administrator Z administrator-z allows Blind SQ… |
CVE-2024-51625 | High | 8.5 | 2024-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in edckwt Quran Shortcode quran-shortcode allows Blind SQL I… |
CVE-2024-51621 | High | 8.5 | 2024-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reza19 Download-Mirror-Counter wp-download-mirror-counter… |
CVE-2024-51620 | High | 8.5 | 2024-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in porsline Porsline porsline allows Blind SQL Injection.Thi… |
CVE-2024-51619 | High | 8.5 | 2024-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in market360 Market 360 Viewer market-360-viewer allows Blin… |
CVE-2024-51607 | High | 8.5 | 2024-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in percent20 Golf Tracker golf-tracker allows SQL Injection… |
CVE-2024-51602 | High | 8.5 | 2024-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in oleksandr87 Simple Job Manager simple-job-manager allows… |
CVE-2024-51601 | High | 8.5 | 2024-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Maksym Marko Website price calculator price-calculator-to… |
CVE-2024-51579 | High | 8.5 | 2024-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saleswonder Team: Tobias 5 Stars Rating Funnel 5-stars-ra… |
CVE-2024-51570 | High | 8.5 | 2024-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in odihost Easy Gallery simple-gallery-odihost allows SQL In… |
CVE-2024-9874 | Medium | 4.9 | 2024-11-09 | The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all v… |
CVE-2024-51211 | Critical | 9.8 | 2024-11-08 | SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. The vulnerability is due to improper input… |
CVE-2024-51030 | Medium | 6.5 | 2024-11-08 | A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQ… |
CVE-2024-10998 | High | 7.3 | 2024-11-08 | A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the fi… |
CVE-2024-10997 | Medium | 6.3 | 2024-11-08 | A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the fi… |
CVE-2024-10996 | High | 7.3 | 2024-11-08 | A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin… |
CVE-2024-10995 | High | 7.3 | 2024-11-08 | A vulnerability was found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2024-10991 | High | 7.3 | 2024-11-08 | A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of th… |
CVE-2024-10990 | Medium | 6.3 | 2024-11-08 | A vulnerability classified as critical was found in SourceCodester Online Veterinary Appointment System 1.0. This vulnerability affects unknown code of the fil… |
CVE-2024-10989 | Medium | 6.3 | 2024-11-08 | A vulnerability classified as critical has been found in code-projects E-Health Care System 1.0. This affects an unknown part of the file /Admin/detail.php. Th… |
CVE-2024-10988 | High | 7.3 | 2024-11-08 | A vulnerability was found in code-projects E-Health Care System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the… |
CVE-2024-10987 | Medium | 6.3 | 2024-11-08 | A vulnerability was found in code-projects E-Health Care System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2024-50766 | Critical | 9.8 | 2024-11-07 | SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter. |
CVE-2024-10969 | High | 7.3 | 2024-11-07 | A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2024-10968 | High | 7.3 | 2024-11-07 | A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown func… |
CVE-2024-45794 | High | 8.3 | 2024-11-07 | devtron is an open source tool integration platform for Kubernetes. In affected versions an authenticated user (with minimum permission) could utilize and expl… |
CVE-2024-10967 | High | 7.3 | 2024-11-07 | A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file /Doctor/de… |
CVE-2024-43436 | High | 7.2 | 2024-11-07 | A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators. |
CVE-2024-10947 | Medium | 4.7 | 2024-11-07 | A vulnerability classified as critical was found in Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System up t… |
CVE-2024-10946 | Medium | 4.7 | 2024-11-07 | A vulnerability classified as critical has been found in Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System… |
CVE-2024-48325 | High | 8.1 | 2024-11-06 | Portabilis i-Educar 2.8.0 is vulnerable to SQL Injection in the "getDocuments" function of the "InstituicaoDocumentacaoController" class. The "instituicao_id"… |
CVE-2024-20536 | High | 8.8 | 2024-11-06 | A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remot… |
CVE-2024-50332 | High | 8.8 | 2024-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Insufficient input value validation causes Blind SQL… |
CVE-2024-49773 | Medium | 5.3 | 2024-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Poor input validation in export allows authenticated… |
CVE-2024-49772 | High | 8.8 | 2024-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In SuiteCRM versions 7.14.4, poor input validation al… |
CVE-2023-29119 | Critical | 9.6 | 2024-11-05 | Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php. |
CVE-2023-29118 | Critical | 9.6 | 2024-11-05 | Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php. |
CVE-2024-10845 | High | 7.3 | 2024-11-05 | A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2024-10844 | High | 7.3 | 2024-11-05 | A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file search… |
CVE-2024-10841 | Medium | 5.5 | 2024-11-05 | A vulnerability classified as critical was found in romadebrian WEB-Sekolah 1.0. Affected by this vulnerability is an unknown functionality of the file /Proses… |