CWE-89 · SQL Injection (page 80)
Page 80 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-42561 | High | 8.8 | 2024-08-20 | Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at sales_report.php. |
CVE-2024-42558 | Critical | 9.8 | 2024-08-20 | Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter at admin_modify_room.php. |
CVE-2024-42556 | Critical | 9.8 | 2024-08-20 | Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parameter at admin_room_removed.php. |
CVE-2024-42554 | High | 8.8 | 2024-08-20 | Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parameter at admin_room_added.php. |
CVE-2024-42552 | High | 8.6 | 2024-08-20 | Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter at admin_room_history.php. |
CVE-2024-6847 | Critical | 9.8 | 2024-08-20 | The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL i… |
CVE-2024-7780 | High | 7.2 | 2024-08-20 | The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable… |
CVE-2024-7702 | High | 7.2 | 2024-08-20 | The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable… |
CVE-2024-7949 | Medium | 6.3 | 2024-08-20 | A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the… |
CVE-2024-7947 | High | 7.3 | 2024-08-20 | A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the… |
CVE-2024-7946 | High | 7.3 | 2024-08-20 | A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functi… |
CVE-2024-7827 | High | 8.8 | 2024-08-20 | The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to boolean-based SQL Injection via the ‘model_number’ parameter in all versions up to, a… |
CVE-2024-7937 | Medium | 6.3 | 2024-08-20 | A vulnerability classified as critical was found in itsourcecode Project Expense Monitoring System 1.0. This vulnerability affects unknown code of the file pri… |
CVE-2024-7936 | Medium | 6.3 | 2024-08-20 | A vulnerability classified as critical has been found in itsourcecode Project Expense Monitoring System 1.0. This affects an unknown part of the file transferr… |
CVE-2024-7935 | Medium | 6.3 | 2024-08-19 | A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been rated as critical. Affected by this issue is some unknown function… |
CVE-2024-7934 | Medium | 6.3 | 2024-08-19 | A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown… |
CVE-2024-7933 | High | 7.3 | 2024-08-19 | A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been classified as critical. Affected is an unknown function of the fil… |
CVE-2024-7931 | Medium | 6.3 | 2024-08-19 | A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects some unknown processing of the fil… |
CVE-2024-7930 | Medium | 6.3 | 2024-08-19 | A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. This vulnerability affects unknown code of t… |
CVE-2024-7913 | High | 7.3 | 2024-08-18 | A vulnerability was found in itsourcecode Billing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addclient1… |
CVE-2024-43286 | High | 8.5 | 2024-08-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SE… |
CVE-2024-43282 | High | 7.6 | 2024-08-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a… |
CVE-2024-43207 | High | 8.5 | 2024-08-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Valiano Unite Gallery Lite.This issue affects Unite Galle… |
CVE-2024-43145 | High | 8.5 | 2024-08-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode Ltd GeoDirectory.This issue affects GeoDirectory… |
CVE-2023-3419 | High | 7.2 | 2024-08-17 | The tagDiv Opt-In Builder plugin is vulnerable to Blind SQL Injection via the 'couponId' parameter of the 'recreate_stripe_subscription' REST API endpoint in v… |
CVE-2023-3416 | High | 7.2 | 2024-08-17 | The tagDiv Opt-In Builder plugin is vulnerable to Blind SQL Injection via the 'subscriptionCouponId' parameter via the 'create_stripe_subscription' REST API en… |
CVE-2024-42994 | High | 7.2 | 2024-08-16 | VTiger CRM <= 8.1.0 does not properly sanitize user input before using it in a SQL statement, leading to a SQL Injection in the "CompanyDetails" operation of t… |
CVE-2024-7853 | Medium | 6.3 | 2024-08-16 | A vulnerability was found in SourceCodester Yoga Class Registration System up to 1.0. It has been classified as critical. Affected is an unknown function of th… |
CVE-2024-7845 | Medium | 6.3 | 2024-08-16 | A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2024-7841 | Medium | 6.3 | 2024-08-15 | A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System 1.0. This vulnerability affects unknown code of the file /… |
CVE-2024-7839 | High | 7.3 | 2024-08-15 | A vulnerability classified as critical has been found in itsourcecode Billing System 1.0. This affects an unknown part of the file addbill.php. The manipulatio… |
CVE-2024-6456 | | 2024-08-15 | AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privileges of an interactive Historian REST… | |
CVE-2024-7838 | High | 7.3 | 2024-08-15 | A vulnerability was found in itsourcecode Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2024-32231 | Medium | 6.3 | 2024-08-15 | Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter. |
CVE-2024-42843 | Critical | 9.8 | 2024-08-15 | Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.php. |
CVE-2024-42679 | High | 7.8 | 2024-08-15 | SQL Injection vulnerability in Super easy enterprise management system v.1.0.0 and before allows a local attacker to execute arbitrary code via a crafted scrip… |
CVE-2024-7811 | Medium | 6.3 | 2024-08-15 | A vulnerability classified as critical has been found in SourceCodester Daily Expenses Monitoring App 1.0. This affects an unknown part of the file /endpoint/d… |
CVE-2024-7810 | Medium | 6.3 | 2024-08-15 | A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been rated as critical. Affected by this issue is some unknown functional… |
CVE-2024-7808 | High | 7.3 | 2024-08-15 | A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file logindbc.php. The ma… |
CVE-2024-7800 | Medium | 6.3 | 2024-08-15 | A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file /simple-onli… |
CVE-2024-7798 | High | 7.3 | 2024-08-15 | A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown fu… |
CVE-2024-7797 | High | 7.3 | 2024-08-15 | A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. Affected is an unknown function of the file /… |
CVE-2024-7794 | Medium | 6.3 | 2024-08-14 | A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2024-7792 | Medium | 6.3 | 2024-08-14 | A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been classified as critical. Affected is an unknown function of the file /endpoin… |
CVE-2024-7732 | Critical | 9.8 | 2024-08-14 | Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands t… |
CVE-2024-7731 | Critical | 9.8 | 2024-08-14 | Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands t… |
CVE-2024-7754 | Medium | 6.3 | 2024-08-14 | A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of… |
CVE-2024-7751 | Medium | 6.3 | 2024-08-13 | A vulnerability was found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. Affected by this issue is some unknown functional… |
CVE-2024-7750 | Medium | 6.3 | 2024-08-13 | A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2024-7748 | Medium | 6.3 | 2024-08-13 | A vulnerability, which was classified as critical, has been found in SourceCodester Accounts Manager App 1.0. This issue affects some unknown processing of the… |
CVE-2024-43360 | Critical | 9.8 | 2024-08-12 | ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder is affected by a time-based SQL Injection vulnerability. This vuln… |
CVE-2023-41884 | High | 7.1 | 2024-08-12 | ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query without sa… |
CVE-2024-7682 | High | 7.3 | 2024-08-12 | A vulnerability was found in code-projects Job Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file rw_i_nat.php… |
CVE-2024-7681 | High | 7.3 | 2024-08-12 | A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2024-7680 | Medium | 6.3 | 2024-08-12 | A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /incedi… |
CVE-2024-7676 | Medium | 6.3 | 2024-08-12 | A vulnerability was found in Sourcecodester Car Driving School Management System 1.0. It has been classified as critical. Affected is the function save_package… |
CVE-2024-7669 | Medium | 6.3 | 2024-08-12 | A vulnerability was found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This issue affects the function delete_enrollm… |
CVE-2024-7668 | Medium | 6.3 | 2024-08-12 | A vulnerability has been found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This vulnerability affects the function d… |
CVE-2024-7667 | Medium | 6.3 | 2024-08-12 | A vulnerability, which was classified as critical, was found in SourceCodester Car Driving School Management System 1.0. This affects the function delete_users… |
CVE-2024-7666 | Medium | 6.3 | 2024-08-12 | A vulnerability, which was classified as critical, has been found in SourceCodester Car Driving School Management System 1.0. Affected by this issue is some un… |
CVE-2024-7665 | Medium | 6.3 | 2024-08-12 | A vulnerability classified as critical was found in SourceCodester Car Driving School Management System 1.0. Affected by this vulnerability is an unknown funct… |
CVE-2024-7664 | Medium | 6.3 | 2024-08-12 | A vulnerability classified as critical has been found in SourceCodester Car Driving School Management System 1.0. Affected is an unknown function of the file v… |
CVE-2024-7663 | Medium | 6.3 | 2024-08-12 | A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as critical. This issue affects some unknown processing… |
CVE-2024-7643 | Medium | 6.3 | 2024-08-12 | A vulnerability was found in SourceCodester Leads Manager Tool 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2024-7642 | Medium | 6.3 | 2024-08-12 | A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. Affected by this vulnerability i… |
CVE-2024-7641 | Medium | 6.3 | 2024-08-12 | A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected is an unknown functi… |
CVE-2024-7640 | Medium | 6.3 | 2024-08-12 | A vulnerability, which was classified as critical, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This issue affects some… |
CVE-2024-7639 | Medium | 6.3 | 2024-08-12 | A vulnerability classified as critical was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This vulnerability affects unknown code o… |
CVE-2024-7638 | Medium | 6.3 | 2024-08-12 | A vulnerability classified as critical has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the… |
CVE-2024-7637 | High | 7.3 | 2024-08-12 | A vulnerability was found in code-projects Online Polling 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2024-7636 | High | 7.3 | 2024-08-12 | A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functional… |
CVE-2024-7635 | High | 7.3 | 2024-08-12 | A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been classified as critical. Affected is an unknown function of the file register_… |
CVE-2024-5527 | High | 8.3 | 2024-08-12 | Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration. |
CVE-2024-5487 | High | 8.3 | 2024-08-12 | Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option. |
CVE-2024-40486 | Critical | 9.8 | 2024-08-12 | A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Log… |
CVE-2024-40479 | High | 8.1 | 2024-08-12 | A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via t… |
CVE-2024-40477 | Critical | 9.8 | 2024-08-12 | A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 allows an attacker to execute arbitrary S… |
CVE-2024-40472 | Critical | 9.8 | 2024-08-12 | Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php." |
CVE-2024-36518 | High | 8.3 | 2024-08-12 | Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard. |
CVE-2024-36035 | High | 8.3 | 2024-08-12 | Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording. |
CVE-2024-36034 | High | 8.3 | 2024-08-12 | Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option. |
CVE-2024-7477 | Medium | 6.5 | 2024-08-08 | A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries again… |
CVE-2024-41238 | Medium | 5.3 | 2024-08-08 | A SQL injection vulnerability in /smsa/student_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL comm… |
CVE-2024-42357 | High | 7.3 | 2024-08-08 | Shopware is an open commerce platform. Prior to versions 6.6.5.1 and 6.5.8.13, the Shopware application API contains a search functionality which enables users… |
CVE-2024-7548 | High | 8.8 | 2024-08-08 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'order' parameter in all versions up to, and inclu… |
CVE-2024-7150 | High | 8.8 | 2024-08-08 | The Slider by 10Web – Responsive Image Slider plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and… |
CVE-2024-41237 | Critical | 9.8 | 2024-08-07 | A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL comm… |
CVE-2024-34480 | Critical | 9.8 | 2024-08-07 | SourceCodester Computer Laboratory Management System 1.0 allows admin/category/view_category.php id SQL Injection. |
CVE-2024-34479 | Critical | 9.8 | 2024-08-07 | SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection. |
CVE-2024-42005 | High | 7.3 | 2024-08-07 | An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values() and values_list() methods on models with a JSONField are subject to… |
CVE-2024-33974 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33973 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33972 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33971 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33970 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33969 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33968 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33967 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33966 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33965 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |