CWE-89 · SQL Injection (page 81)
Page 81 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-33964 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33963 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33962 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33961 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33960 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33959 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33958 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the… |
CVE-2024-33957 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the… |
CVE-2024-7505 | High | 7.3 | 2024-08-06 | A vulnerability, which was classified as critical, was found in itsourcecode Bike Delivery System 1.0. Affected is an unknown function of the file contact_us_a… |
CVE-2024-7009 | Medium | 4.2 | 2024-08-06 | Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database. |
CVE-2024-7499 | Medium | 6.3 | 2024-08-06 | A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functi… |
CVE-2024-7498 | High | 7.3 | 2024-08-06 | A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been classified as critical. Affected is the function login/login2 of the file… |
CVE-2023-5000 | High | 8.8 | 2024-08-06 | The Horizontal scrolling announcements plugin for WordPress is vulnerable to SQL Injection via the plugin's 'hsas-shortcode' shortcode in versions up to, and i… |
CVE-2024-7494 | Medium | 6.3 | 2024-08-05 | A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is some unkno… |
CVE-2024-40498 | Critical | 9.8 | 2024-08-05 | SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbitrary code via the register.php |
CVE-2024-7461 | High | 7.3 | 2024-08-05 | A vulnerability was found in ForIP Tecnologia Administração PABX 1.x. It has been rated as critical. Affected by this issue is some unknown functionality of th… |
CVE-2024-7455 | Medium | 6.3 | 2024-08-04 | A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file partedit… |
CVE-2024-7454 | Medium | 6.3 | 2024-08-04 | A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is the functi… |
CVE-2024-7452 | Medium | 6.3 | 2024-08-04 | A vulnerability was found in itsourcecode Placement Management System 1.0. It has been classified as critical. This affects an unknown part of the file view_co… |
CVE-2024-7451 | Medium | 6.3 | 2024-08-04 | A vulnerability was found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of t… |
CVE-2024-7449 | High | 7.3 | 2024-08-04 | A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file login… |
CVE-2024-7446 | Medium | 4.7 | 2024-08-03 | A vulnerability, which was classified as critical, was found in itsourcecode Ticket Reservation System 1.0. This affects an unknown part of the file list_ticke… |
CVE-2024-7445 | Medium | 4.7 | 2024-08-03 | A vulnerability, which was classified as critical, has been found in itsourcecode Ticket Reservation System 1.0. Affected by this issue is some unknown functio… |
CVE-2024-7444 | High | 7.3 | 2024-08-03 | A vulnerability classified as critical was found in itsourcecode Ticket Reservation System 1.0. Affected by this vulnerability is an unknown functionality of t… |
CVE-2024-38889 | Critical | 9.8 | 2024-08-02 | An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform SQL Injec… |
CVE-2024-28298 | High | 8.8 | 2024-08-02 | SQL injection vulnerability in BM SOFT BMPlanning 1.0.0.1 allows authenticated users to execute arbitrary SQL commands via the SEC_IDF, LIE_IDF, PLANF_IDF, CLI… |
CVE-2024-28297 | High | 7.5 | 2024-08-02 | SQL injection vulnerability in AzureSoft MyHorus 4.3.5 allows authenticated users to execute arbitrary SQL commands via unspecified vectors. |
CVE-2024-7378 | Medium | 6.3 | 2024-08-02 | A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. Affected by this issue is some unknown functionality of… |
CVE-2024-7377 | Medium | 6.3 | 2024-08-02 | A vulnerability has been found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. Affected by this vulnerability is an unknown funct… |
CVE-2024-7376 | Medium | 6.3 | 2024-08-02 | A vulnerability, which was classified as critical, was found in SourceCodester Simple Realtime Quiz System 1.0. Affected is an unknown function of the file /pr… |
CVE-2024-7375 | Medium | 6.3 | 2024-08-02 | A vulnerability, which was classified as critical, has been found in SourceCodester Simple Realtime Quiz System 1.0. This issue affects some unknown processing… |
CVE-2024-7374 | Medium | 6.3 | 2024-08-02 | A vulnerability classified as critical was found in SourceCodester Simple Realtime Quiz System 1.0. This vulnerability affects unknown code of the file /manage… |
CVE-2024-7373 | Medium | 6.3 | 2024-08-02 | A vulnerability classified as critical has been found in SourceCodester Simple Realtime Quiz System 1.0. This affects an unknown part of the file /ajax.php?act… |
CVE-2024-7372 | Medium | 6.3 | 2024-08-02 | A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0. It has been rated as critical. Affected by this issue is some unknown functionalit… |
CVE-2024-7371 | Medium | 6.3 | 2024-08-01 | A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown fun… |
CVE-2024-7370 | Medium | 6.3 | 2024-08-01 | A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0. It has been classified as critical. Affected is an unknown function of the file /m… |
CVE-2024-7369 | High | 7.3 | 2024-08-01 | A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. This issue affects some unknown processing of the file… |
CVE-2024-7366 | High | 7.3 | 2024-08-01 | A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0. It has been classified as critical. This affects an unknown part of the… |
CVE-2024-7365 | Medium | 6.3 | 2024-08-01 | A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0 and classified as critical. Affected by this issue is some unknown functi… |
CVE-2024-7364 | Medium | 6.3 | 2024-08-01 | A vulnerability has been found in SourceCodester Tracking Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unk… |
CVE-2024-7363 | Medium | 6.3 | 2024-08-01 | A vulnerability, which was classified as critical, was found in SourceCodester Tracking Monitoring Management System 1.0. Affected is an unknown function of th… |
CVE-2024-7362 | Medium | 6.3 | 2024-08-01 | A vulnerability, which was classified as critical, has been found in SourceCodester Tracking Monitoring Management System 1.0. This issue affects some unknown… |
CVE-2024-7361 | Medium | 6.3 | 2024-08-01 | A vulnerability classified as critical was found in SourceCodester Tracking Monitoring Management System 1.0. This vulnerability affects unknown code of the fi… |
CVE-2024-5678 | Medium | 4.7 | 2024-08-01 | Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature. |
CVE-2024-7327 | Medium | 6.3 | 2024-07-31 | A vulnerability classified as critical was found in Xinhu RockOA 2.6.2. This vulnerability affects the function dataAction of the file /webmain/task/openapi/op… |
CVE-2024-7320 | High | 7.3 | 2024-07-31 | A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affects an unknown part of the file /admin/… |
CVE-2024-7311 | High | 7.3 | 2024-07-31 | A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been rated as critical. This issue affects some unknown processing of the fi… |
CVE-2024-7308 | Medium | 6.3 | 2024-07-31 | A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this issue is some unknown func… |
CVE-2024-7307 | Medium | 6.3 | 2024-07-31 | A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this vulnerability is an u… |
CVE-2024-7306 | Medium | 6.3 | 2024-07-31 | A vulnerability, which was classified as critical, was found in SourceCodester Establishment Billing Management System 1.0. Affected is an unknown function of… |
CVE-2024-7290 | Medium | 6.3 | 2024-07-31 | A vulnerability classified as critical has been found in SourceCodester Establishment Billing Management System 1.0. This affects an unknown part of the file /… |
CVE-2024-7289 | Medium | 6.3 | 2024-07-31 | A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown… |
CVE-2024-7288 | Medium | 6.3 | 2024-07-31 | A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an… |
CVE-2024-7287 | Medium | 6.3 | 2024-07-31 | A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been classified as critical. Affected is an unknown function of… |
CVE-2024-7286 | High | 7.3 | 2024-07-31 | A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. This issue affects some unknown processing… |
CVE-2024-7283 | Medium | 6.3 | 2024-07-31 | A vulnerability, which was classified as critical, has been found in SourceCodester Lot Reservation Management System 1.0. Affected by this issue is some unkno… |
CVE-2024-7282 | Medium | 6.3 | 2024-07-31 | A vulnerability classified as critical was found in SourceCodester Lot Reservation Management System 1.0. Affected by this vulnerability is an unknown function… |
CVE-2024-7281 | Medium | 6.3 | 2024-07-31 | A vulnerability classified as critical has been found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the file /adm… |
CVE-2024-7280 | Medium | 6.3 | 2024-07-31 | A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been rated as critical. This issue affects some unknown processing of… |
CVE-2024-7279 | High | 7.3 | 2024-07-31 | A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of… |
CVE-2024-7278 | Medium | 4.7 | 2024-07-31 | A vulnerability was found in itsourcecode Alton Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/team… |
CVE-2024-7276 | Medium | 4.7 | 2024-07-30 | A vulnerability has been found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2024-7275 | Medium | 4.7 | 2024-07-30 | A vulnerability, which was classified as critical, was found in itsourcecode Alton Management System 1.0. Affected is an unknown function of the file /admin/ca… |
CVE-2024-7274 | Medium | 4.7 | 2024-07-30 | A vulnerability, which was classified as critical, has been found in itsourcecode Alton Management System 1.0. This issue affects some unknown processing of th… |
CVE-2024-7273 | Medium | 6.3 | 2024-07-30 | A vulnerability classified as critical was found in itsourcecode Alton Management System 1.0. This vulnerability affects unknown code of the file search.php. T… |
CVE-2024-41944 | Medium | 6.5 | 2024-07-30 | Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `report/data/proofofplayReport` API route inside the CMS. This… |
CVE-2024-41915 | High | 7.2 | 2024-07-30 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks… |
CVE-2024-41804 | Medium | 6.5 | 2024-07-30 | Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API route inside the CMS responsible for Adding/Editing DataSet… |
CVE-2024-41803 | Medium | 4.9 | 2024-07-30 | Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API routes inside the CMS responsible for Filtering DataSets. T… |
CVE-2024-41802 | High | 8.1 | 2024-07-30 | Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API routes inside the CMS responsible for Filtering DataSets. T… |
CVE-2024-6699 | Critical | 9.8 | 2024-07-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mikafon Electronic Inc. Mikafon MA7 allows SQL Injection… |
CVE-2024-41702 | Critical | 9.8 | 2024-07-30 | SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CVE-2024-7224 | Medium | 6.3 | 2024-07-30 | A vulnerability was found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this issue is some unknown functional… |
CVE-2024-7223 | Medium | 6.3 | 2024-07-30 | A vulnerability has been found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2024-7222 | Medium | 6.3 | 2024-07-30 | A vulnerability, which was classified as critical, was found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the fi… |
CVE-2024-7221 | Medium | 6.3 | 2024-07-30 | A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. This affects an unknown part of the file /admin/manage_user.php. T… |
CVE-2024-7220 | Medium | 6.3 | 2024-07-30 | A vulnerability was found in SourceCodester/Campcodes School Log Management System 1.0. Affected by this issue is some unknown functionality of the file /admin… |
CVE-2024-7219 | High | 7.3 | 2024-07-30 | A vulnerability has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2024-5975 | Critical | 9.1 | 2024-07-30 | The CZ Loan Management WordPress plugin through 1.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action ava… |
CVE-2024-5765 | Critical | 9.8 | 2024-07-30 | The WpStickyBar WordPress plugin through 2.1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action availab… |
CVE-2024-37858 | Critical | 9.8 | 2024-07-29 | SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/cat… |
CVE-2024-37857 | High | 8.8 | 2024-07-29 | SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categor… |
CVE-2024-6748 | High | 8.3 | 2024-07-29 | Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injection in the URL monit… |
CVE-2024-37906 | Critical | 9.9 | 2024-07-29 | Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.9, there is an SQL Injection in t… |
CVE-2024-7199 | Medium | 6.3 | 2024-07-29 | A vulnerability classified as critical was found in SourceCodester Complaints Report Management System 1.0. This vulnerability affects unknown code of the file… |
CVE-2024-7198 | Medium | 6.3 | 2024-07-29 | A vulnerability classified as critical has been found in SourceCodester Complaints Report Management System 1.0. This affects an unknown part of the file /admi… |
CVE-2024-7197 | Medium | 6.3 | 2024-07-29 | A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been rated as critical. Affected by this issue is some unknown func… |
CVE-2024-7196 | High | 7.3 | 2024-07-29 | A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unk… |
CVE-2024-7195 | Medium | 6.3 | 2024-07-29 | A vulnerability was found in itsourcecode Society Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin… |
CVE-2024-7194 | Medium | 6.3 | 2024-07-29 | A vulnerability was found in itsourcecode Society Management System 1.0 and classified as critical. This issue affects some unknown processing of the file chec… |
CVE-2024-7191 | Medium | 6.3 | 2024-07-29 | A vulnerability, which was classified as critical, has been found in itsourcecode Society Management System 1.0. Affected by this issue is some unknown functio… |
CVE-2024-7190 | Medium | 6.3 | 2024-07-29 | A vulnerability classified as critical was found in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of t… |
CVE-2024-7188 | High | 7.3 | 2024-07-29 | A vulnerability was found in Bylancer Quicklancer 2.4. It has been rated as critical. This issue affects some unknown processing of the file /listing of the co… |
CVE-2024-37381 | High | 8.0 | 2024-07-29 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker within the same network to execute arbitrary… |
CVE-2024-7202 | Critical | 9.8 | 2024-07-29 | The query functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to i… |
CVE-2024-7201 | Critical | 9.8 | 2024-07-29 | The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to i… |
CVE-2024-7168 | Medium | 6.3 | 2024-07-28 | A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2024-7167 | Medium | 6.3 | 2024-07-28 | A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown func… |
CVE-2024-7166 | Medium | 6.3 | 2024-07-28 | A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been classified as critical. Affected is an unknown function of the file /re… |
CVE-2024-7165 | Medium | 6.3 | 2024-07-28 | A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /… |