CWE-89 · SQL Injection (page 75)
Page 75 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-10432 | High | 7.3 | 2024-10-28 | A vulnerability has been found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2024-10431 | High | 7.3 | 2024-10-27 | A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an unknown function of the file /deletebir… |
CVE-2024-10430 | High | 7.3 | 2024-10-27 | A vulnerability, which was classified as critical, has been found in Codezips Pet Shop Management System 1.0. This issue affects some unknown processing of the… |
CVE-2024-10427 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /de… |
CVE-2024-10426 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file /animalsadd… |
CVE-2024-10425 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in Project Worlds Student Project Allocation System 1.0 and classified as critical. Affected by this issue is some unknown functional… |
CVE-2024-10424 | Medium | 6.3 | 2024-10-27 | A vulnerability has been found in Project Worlds Student Project Allocation System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2024-10423 | Medium | 6.3 | 2024-10-27 | A vulnerability, which was classified as critical, was found in Project Worlds Student Project Allocation System 1.0. Affected is an unknown function of the fi… |
CVE-2024-10422 | Medium | 6.3 | 2024-10-27 | A vulnerability, which was classified as critical, has been found in SourceCodester Attendance and Payroll System 1.0. This issue affects some unknown processi… |
CVE-2024-10421 | Medium | 6.3 | 2024-10-27 | A vulnerability classified as critical was found in SourceCodester Attendance and Payroll System 1.0. This vulnerability affects unknown code of the file /admi… |
CVE-2024-10418 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown fun… |
CVE-2024-10417 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /f… |
CVE-2024-10416 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in code-projects Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown processing of the file… |
CVE-2024-10415 | Medium | 6.3 | 2024-10-27 | A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as critical. This vulnerability affects unknown code of the fil… |
CVE-2024-10411 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in SourceCodester Online Hotel Reservation System 1.0. It has been classified as critical. Affected is the function doCancelRoom/doCa… |
CVE-2024-10409 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in code-projects Blood Bank Management 1.0 and classified as critical. This issue affects some unknown processing of the file /file/a… |
CVE-2024-10408 | Medium | 6.3 | 2024-10-27 | A vulnerability has been found in code-projects Blood Bank Management up to 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2024-10407 | Medium | 6.3 | 2024-10-27 | A vulnerability, which was classified as critical, was found in SourceCodester Petrol Pump Management Software 1.0. This affects an unknown part of the file /a… |
CVE-2024-10406 | Medium | 6.3 | 2024-10-26 | A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown… |
CVE-2024-9475 | Medium | 4.9 | 2024-10-26 | The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the order_by parameter in all versi… |
CVE-2024-48238 | Medium | 4.7 | 2024-10-25 | WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter. |
CVE-2024-48230 | High | 7.2 | 2024-10-25 | funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php. |
CVE-2024-48229 | High | 7.2 | 2024-10-25 | funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin. |
CVE-2024-48226 | High | 7.2 | 2024-10-25 | Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield. |
CVE-2024-48223 | High | 7.2 | 2024-10-25 | Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist. |
CVE-2024-48222 | High | 7.2 | 2024-10-25 | Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit. |
CVE-2024-48218 | High | 7.2 | 2024-10-25 | Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list. |
CVE-2024-48343 | Medium | 6.3 | 2024-10-25 | A SQL Injection vulnerability in ESAFENET CDG 5 and earlier allows an attacker to execute arbitrary code via the id parameter of the dataSearch.jsp page. |
CVE-2024-48580 | Critical | 9.8 | 2024-10-25 | SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the lo… |
CVE-2024-10380 | Medium | 6.3 | 2024-10-25 | A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown… |
CVE-2024-10378 | Medium | 6.3 | 2024-10-25 | A vulnerability classified as critical has been found in ESAFENET CDG 5. Affected is the function actionViewCDGRenewFile of the file /com/esafenet/servlet/clie… |
CVE-2024-47483 | Low | 2.9 | 2024-10-25 | Dell Data Lakehouse, version(s) 1.0.0.0 and 1.1.0.0, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnera… |
CVE-2024-10377 | Medium | 6.3 | 2024-10-25 | A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. This issue affects the function actionPassDecryptApplication1 of the file /com/esaf… |
CVE-2024-10376 | Medium | 6.3 | 2024-10-25 | A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects the function actionPassOrNotAutoSign of the file /com… |
CVE-2024-10341 | Medium | 6.5 | 2024-10-25 | The League of Legends Shortcodes plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 1.0.1 due to… |
CVE-2024-10370 | High | 7.3 | 2024-10-25 | A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2024-10369 | High | 7.3 | 2024-10-25 | A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2024-10368 | High | 7.3 | 2024-10-25 | A vulnerability was found in Codezips Sales Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /addstock.ph… |
CVE-2024-10355 | Medium | 4.7 | 2024-10-25 | A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown… |
CVE-2024-10354 | Medium | 4.7 | 2024-10-25 | A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. Affected by this vulnerability is an unknown functional… |
CVE-2024-10350 | Medium | 4.7 | 2024-10-24 | A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the fil… |
CVE-2024-41618 | Critical | 9.8 | 2024-10-24 | Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to SQL Injection in the `transaction_delete_group` function. The vulnerability is due to imp… |
CVE-2024-10349 | Medium | 6.3 | 2024-10-24 | A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. Affected by this issue is the function delete_t… |
CVE-2024-47881 | High | 8.1 | 2024-10-24 | OpenRefine is a free, open source tool for working with messy data. Starting in version 3.4-beta and prior to version 3.8.3, in the `database` extension, the "… |
CVE-2024-48427 | High | 8.8 | 2024-10-24 | A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated users to execute arbitrary SQL commands v… |
CVE-2024-10338 | Medium | 4.7 | 2024-10-24 | A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this vulnerability is an unknown functionalit… |
CVE-2024-10337 | Medium | 4.7 | 2024-10-24 | A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is an unknown function of the file /admin/h… |
CVE-2024-10336 | High | 7.3 | 2024-10-24 | A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue affects some unknown processing of the… |
CVE-2024-10335 | High | 7.3 | 2024-10-24 | A vulnerability was found in SourceCodester Garbage Collection Management System 1.0. It has been declared as critical. This vulnerability affects unknown code… |
CVE-2024-5608 | High | 8.3 | 2024-10-24 | Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature. |
CVE-2024-49691 | High | 7.6 | 2024-10-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW Plugins Product Filter by WBW woo-product-filter allo… |
CVE-2024-49681 | Critical | 9.3 | 2024-10-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in activity-log.com WP Sessions Time Monitoring Full Automat… |
CVE-2024-10331 | Medium | 6.3 | 2024-10-24 | A vulnerability, which was classified as critical, has been found in PHPGurukul Vehicle Record System 1.0. This issue affects some unknown processing of the fi… |
CVE-2024-10301 | Medium | 4.7 | 2024-10-23 | A vulnerability, which was classified as critical, was found in PHPGurukul Medical Card Generation System 1.0. Affected is an unknown function of the file /adm… |
CVE-2024-10300 | Medium | 4.7 | 2024-10-23 | A vulnerability, which was classified as critical, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processing… |
CVE-2024-10299 | Medium | 4.7 | 2024-10-23 | A vulnerability classified as critical was found in PHPGurukul Medical Card Generation System 1.0. This vulnerability affects unknown code of the file /admin/v… |
CVE-2024-10298 | Medium | 4.7 | 2024-10-23 | A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/edit-ca… |
CVE-2024-20473 | Medium | 6.5 | 2024-10-23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker t… |
CVE-2024-20472 | Medium | 6.5 | 2024-10-23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker t… |
CVE-2024-20471 | Medium | 6.5 | 2024-10-23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker t… |
CVE-2024-10297 | Medium | 4.7 | 2024-10-23 | A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2024-20340 | Medium | 6.5 | 2024-10-23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software… |
CVE-2024-10296 | Medium | 4.7 | 2024-10-23 | A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown func… |
CVE-2024-10291 | Medium | 6.3 | 2024-10-23 | A vulnerability has been found in ZZCMS 2023 and classified as critical. This vulnerability affects the function Ebak_DoExecSQL/Ebak_DotranExecutSQL of the fil… |
CVE-2024-10279 | Medium | 6.3 | 2024-10-23 | A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects unknown code of the file /com/esafenet/servlet/policy… |
CVE-2024-10278 | Medium | 6.3 | 2024-10-23 | A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects an unknown part of the file /com/esafenet/servlet/user/ReUserOrga… |
CVE-2024-10277 | Medium | 6.3 | 2024-10-23 | A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/… |
CVE-2024-48657 | High | 7.2 | 2024-10-22 | SQL Injection vulnerability in hospital management system in php with source code v.1.0.0 allows a remote attacker to execute arbitrary code. |
CVE-2024-44812 | Critical | 9.8 | 2024-10-22 | SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the username and password parameters in the /adm… |
CVE-2024-46903 | Medium | 6.5 | 2024-10-22 | A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected install… |
CVE-2024-46902 | High | 8.4 | 2024-10-22 | A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected install… |
CVE-2024-39753 | High | 7.5 | 2024-10-22 | An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please not… |
CVE-2024-48570 | High | 7.5 | 2024-10-22 | Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php. |
CVE-2024-9987 | High | 8.8 | 2024-10-22 | A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agents_modules_csv functionality. This issue affects Pandora F… |
CVE-2024-35286 | Critical | 9.8 | 2024-10-21 | A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insuf… |
CVE-2024-30158 | High | 7.2 | 2024-10-21 | A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to c… |
CVE-2024-30157 | High | 7.2 | 2024-10-21 | A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative priv… |
CVE-2024-48597 | High | 8.1 | 2024-10-21 | Online Clinic Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /success/editp.php?action=edit. |
CVE-2024-48509 | Critical | 9.8 | 2024-10-21 | Learning with Texts (LWT) 2.0.3 is vulnerable to SQL Injection. This occurs when the application fails to properly sanitize user inputs, allowing attackers to… |
CVE-2024-47223 | Critical | 9.4 | 2024-10-21 | A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attac… |
CVE-2024-47189 | High | 7.7 | 2024-10-21 | The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated att… |
CVE-2024-48231 | High | 7.2 | 2024-10-21 | Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php. |
CVE-2024-47328 | High | 7.6 | 2024-10-21 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Automations wp-marketing-automations allow… |
CVE-2024-8625 | High | 7.2 | 2024-10-21 | The TS Poll WordPress plugin before 2.4.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injectio… |
CVE-2024-10196 | Medium | 6.3 | 2024-10-21 | A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /a… |
CVE-2024-49620 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mrcheck116 FERMA.ru.net ferma-ru-net-checkout allows Blin… |
CVE-2024-49619 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in acespritech Social Link Groups social-link-groups allows… |
CVE-2024-49618 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jordan Lyall MyTweetLinks mytweetlinks allows Blind SQL I… |
CVE-2024-49616 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in nyasro Rate Own Post rate-own-post allows Blind SQL Injec… |
CVE-2024-49614 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SermonAudio SermonAudio Widgets sermonaudio-widgets allow… |
CVE-2024-49613 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in developersnote Simple Code Insert Shortcode simple-code-i… |
CVE-2024-49612 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sanjeev SW Contact Form sw-contact-form allows Blind SQL… |
CVE-2024-49609 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brandon White Author Discussion author-discussion allows… |
CVE-2024-47325 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle MPG multiple-pages-generator-by-porthas allows… |
CVE-2024-49623 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hasan movahed Duplicate Title Validate duplicate-title-va… |
CVE-2024-10195 | Medium | 4.7 | 2024-10-20 | A vulnerability was found in Tecno 4G Portable WiFi TR118 V008-20220830. It has been declared as critical. Affected by this vulnerability is an unknown functio… |
CVE-2024-10171 | Medium | 4.7 | 2024-10-20 | A vulnerability, which was classified as critical, was found in code-projects Blood Bank System up to 1.0. Affected is an unknown function of the file /admin/m… |
CVE-2024-10170 | Medium | 6.3 | 2024-10-20 | A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. This issue affects some unknown processing o… |
CVE-2024-10169 | Medium | 6.3 | 2024-10-20 | A vulnerability classified as critical was found in code-projects Hospital Management System 1.0. This vulnerability affects unknown code of the file change-pa… |
CVE-2024-10167 | High | 7.3 | 2024-10-20 | A vulnerability classified as critical has been found in Codezips Sales Management System 1.0. This affects an unknown part of the file deletecustind.php. The… |