CWE-89 · SQL Injection (page 84)
Page 84 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-9976 | Medium | 6.3 | 2024-10-15 | A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/manage_cus… |
CVE-2024-9974 | Medium | 6.3 | 2024-10-15 | A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2024-9973 | Medium | 6.3 | 2024-10-15 | A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?pa… |
CVE-2024-9925 | Critical | 9.8 | 2024-10-15 | SQL injection vulnerability in TAI Smart Factory's QPLANT SF version 1.0. Exploitation of this vulnerability could allow a remote attacker to retrieve all data… |
CVE-2024-9982 | Critical | 9.8 | 2024-10-15 | AIM LINE Marketing Platform from Esi Technology does not properly validate a specific query parameter. When the LINE Campaign Module is enabled, unauthenticate… |
CVE-2024-9980 | High | 8.8 | 2024-10-15 | The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to inject arbitrary SQL c… |
CVE-2024-9972 | Critical | 9.8 | 2024-10-15 | Property Management System from ChanGate has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read… |
CVE-2024-9971 | High | 8.8 | 2024-10-15 | The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing remote attackers with regular privileg… |
CVE-2024-9968 | High | 8.8 | 2024-10-15 | WebEIP v3.0 from NewType does not properly validate user input, allowing remote attackers with regular privilege to inject SQL commands to read, modify, and… |
CVE-2024-46535 | Critical | 9.8 | 2024-10-14 | Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg. |
CVE-2024-48259 | High | 7.3 | 2024-10-14 | Cloudlog 2.6.15 allows Oqrs.php request_form SQL injection via station_id or callsign. |
CVE-2024-48257 | Critical | 9.8 | 2024-10-14 | Wavelog 1.8.5 allows Oqrs_model.php get_worked_modes station_id SQL injectioin. |
CVE-2024-48251 | Critical | 9.8 | 2024-10-14 | Wavelog 1.8.5 allows Activated_gridmap_model.php get_band_confirmed SQL injection via band, sat, propagation, or mode. |
CVE-2024-48249 | High | 7.3 | 2024-10-14 | Wavelog 1.8.5 allows Gridmap_model.php get_band_confirmed SQL injection via band, sat, propagation, or mode. |
CVE-2024-48255 | Critical | 9.8 | 2024-10-14 | Cloudlog 2.6.15 allows Oqrs.php get_station_info station_id SQL injection. |
CVE-2024-48253 | Critical | 9.8 | 2024-10-14 | Cloudlog 2.6.15 allows Oqrs.php delete_oqrs_line id SQL injection. |
CVE-2024-9921 | Critical | 9.8 | 2024-10-14 | The Team+ from TEAMPLUS TECHNOLOGY does not properly validate specific page parameter, allowing unauthenticated remote attackers to inject arbitrary SQL comman… |
CVE-2024-7099 | Critical | 9.8 | 2024-10-13 | netease-youdao/qanything version 1.4.1 contains a vulnerability where unsafe data obtained from user input is concatenated in SQL queries, leading to SQL injec… |
CVE-2024-9918 | Medium | 4.7 | 2024-10-13 | A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. This vulnerability affects the function RunSql of the file app/modules/ut-data/… |
CVE-2024-9905 | Medium | 6.3 | 2024-10-13 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the… |
CVE-2024-9894 | Medium | 6.3 | 2024-10-12 | A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file reset.php. The… |
CVE-2024-8757 | High | 7.2 | 2024-10-12 | The WP Post Author – Boost Your Blog's Engagement with Author Box, Social Links, Co-Authors, Guest Authors, Post Rating System, and Custom User Registrati… |
CVE-2024-45754 | High | 7.2 | 2024-10-11 | An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and… |
CVE-2024-48040 | High | 8.5 | 2024-10-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan tainacan allows SQL Injection.This issu… |
CVE-2024-48020 | High | 8.5 | 2024-10-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-cap… |
CVE-2024-47331 | Critical | 9.3 | 2024-10-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ninja Team Multi Step for Contact Form cf7-multi-step all… |
CVE-2024-46532 | Critical | 9.8 | 2024-10-11 | SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component. |
CVE-2024-48813 | High | 8.8 | 2024-10-11 | SQL injection vulnerability in employee-management-system-php-and-mysql-free-download.html taskmatic 1.0 allows a remote attacker to execute arbitrary code via… |
CVE-2024-9818 | High | 7.3 | 2024-10-10 | A vulnerability classified as critical has been found in SourceCodester Online Veterinary Appointment System 1.0. Affected is an unknown function of the file /… |
CVE-2024-9817 | Medium | 6.3 | 2024-10-10 | A vulnerability was found in code-projects Blood Bank System 1.0. It has been classified as critical. This affects an unknown part of the file /update.php. The… |
CVE-2024-9814 | High | 7.3 | 2024-10-10 | A vulnerability, which was classified as critical, was found in Codezips Pharmacy Management System 1.0. Affected is an unknown function of the file product/up… |
CVE-2024-9813 | High | 7.3 | 2024-10-10 | A vulnerability, which was classified as critical, has been found in Codezips Pharmacy Management System 1.0. This issue affects some unknown processing of the… |
CVE-2024-9812 | High | 7.3 | 2024-10-10 | A vulnerability classified as critical was found in code-projects Crud Operation System 1.0. This vulnerability affects unknown code of the file delete.php. Th… |
CVE-2024-9811 | High | 7.3 | 2024-10-10 | A vulnerability classified as critical has been found in code-projects Restaurant Reservation System 1.0. This affects an unknown part of the file filter3.php… |
CVE-2024-9809 | Medium | 6.3 | 2024-10-10 | A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is the function delete_pr… |
CVE-2024-9808 | Medium | 6.3 | 2024-10-10 | A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?pa… |
CVE-2024-9804 | Medium | 4.7 | 2024-10-10 | A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/… |
CVE-2024-9797 | High | 7.3 | 2024-10-10 | A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file register.php… |
CVE-2024-9790 | Medium | 4.7 | 2024-10-10 | A vulnerability was found in LyLme_spage 1.9.5. It has been classified as critical. Affected is an unknown function of the file /admin/sou.php. The manipulatio… |
CVE-2024-9789 | Medium | 4.7 | 2024-10-10 | A vulnerability was found in LyLme_spage 1.9.5 and classified as critical. This issue affects some unknown processing of the file /admin/apply.php. The manipul… |
CVE-2024-9788 | Medium | 4.7 | 2024-10-10 | A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical. This vulnerability affects unknown code of the file /admin/tag.php. The manipul… |
CVE-2024-4658 | | 2024-10-10 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TE Informatics Nova CMS allows SQL Injection. This issue… | |
CVE-2024-9201 | Critical | 9.4 | 2024-10-10 | The SEUR plugin, in its versions prior to 2.5.11, is vulnerable to time-based SQL injection through the use of the ‘id_order’ parameter of the ‘/modules/seur/a… |
CVE-2024-9796 | Critical | 9.8 | 2024-10-10 | The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a SQL statement, allowing unauthenticate… |
CVE-2024-9156 | High | 7.5 | 2024-10-10 | The TI WooCommerce Wishlist WordPress plugin through 2.8.2 is vulnerable to SQL Injection due to insufficient escaping on the user supplied parameter and lack… |
CVE-2024-9022 | High | 7.2 | 2024-10-10 | The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in all versions up to… |
CVE-2024-9465 | Critical | 9.1 | 2024-10-09 | An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password has… |
CVE-2024-9286 | | 2024-10-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TRtek Software Distant Education Platform allows SQL Inje… | |
CVE-2024-47334 | High | 7.6 | 2024-10-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zoho Flow Zoho Flow zoho-flow allows SQL Injection.This i… |
CVE-2024-43468 | Critical | 9.8 | 2024-10-08 | Microsoft Configuration Manager Remote Code Execution Vulnerability |
CVE-2024-9379 | Medium | 6.5 | 2024-10-08 | SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL sta… |
CVE-2024-45918 | Critical | 9.8 | 2024-10-08 | Fujian Kelixin Communication Command and Dispatch Platform <=7.6.6.4391 is vulnerable to SQL Injection via /client/get_gis_fence.php. |
CVE-2024-44349 | Critical | 9.8 | 2024-10-08 | A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated attackers to execute arbitrary SQL commands via the username p… |
CVE-2024-8911 | Critical | 9.8 | 2024-10-08 | The LatePoint plugin for WordPress is vulnerable to Arbitrary User Password Change via SQL Injection in versions up to, and including, 5.0.11. This is due to i… |
CVE-2024-9574 | Critical | 9.8 | 2024-10-07 | SQL injection vulnerability in SOPlanning <1.45, via /soplanning/www/user_groupes.php in the by parameter, which could allow a remote user to submit a speciall… |
CVE-2024-9573 | Medium | 6.3 | 2024-10-07 | SQL injection vulnerability in SOPlanning <1.45, through /soplanning/www/groupe_list.php, in the by parameter, which could allow a remote user to send a specia… |
CVE-2024-47335 | High | 7.6 | 2024-10-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issu… |
CVE-2024-9560 | Medium | 6.3 | 2024-10-06 | A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is the function delCatelogs of the file /CDGServer3/documen… |
CVE-2024-47350 | Critical | 9.3 | 2024-10-06 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITHEMES YITH WooCommerce Ajax Search yith-woocommerce-aj… |
CVE-2024-47338 | High | 8.5 | 2024-10-06 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal WPExperts Square For GiveWP wpexperts-square-f… |
CVE-2024-45249 | Critical | 9.8 | 2024-10-06 | Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CVE-2024-9536 | Medium | 6.3 | 2024-10-05 | A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /MultiServerBackS… |
CVE-2024-47849 | Critical | 9.8 | 2024-10-05 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows SQL Inj… |
CVE-2024-47911 | Medium | 6.7 | 2024-10-04 | In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in the authorizations/group-memberships API endpoint that allows SonarQu… |
CVE-2024-7801 | Medium | 6.5 | 2024-10-04 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip TimeProvider 4100 (Data plot modules) allows SQ… |
CVE-2024-46078 | High | 7.5 | 2024-10-04 | itsourcecode Sports Management System Project 1.0 is vulnerable to SQL Injection in the function delete_category of the file sports_scheduling/player.php via t… |
CVE-2024-41512 | High | 8.8 | 2024-10-04 | A SQL Injection vulnerability in "ccHandler.aspx" in all versions of CADClick v.1.11.0 and before allows remote attackers to execute arbitrary SQL commands via… |
CVE-2024-43699 | Critical | 9.8 | 2024-10-03 | Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script AM_RegReport.aspx. An unauthenticated attacker may be able to exploit this issue t… |
CVE-2024-42417 | High | 8.8 | 2024-10-03 | Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script Handler_CFG.ashx. An authenticated attacker may be able to exploit this issue to c… |
CVE-2024-9460 | High | 7.3 | 2024-10-03 | A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. Th… |
CVE-2024-46626 | High | 8.8 | 2024-10-02 | OS4ED openSIS-Classic v9.1 was discovered to contain a SQL injection vulnerability via a crafted payload. |
CVE-2024-9429 | Medium | 6.3 | 2024-10-02 | A vulnerability has been found in code-projects Restaurant Reservation System 1.0 and classified as critical. Affected by this vulnerability is an unknown func… |
CVE-2024-45999 | Critical | 9.8 | 2024-10-01 | A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the get_station_info()function located in the file /application/models/Oqr… |
CVE-2024-9018 | High | 8.8 | 2024-10-01 | The WP Easy Gallery – WordPress Gallery Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘key’ parameter in all versions up to, an… |
CVE-2024-9360 | High | 7.3 | 2024-10-01 | A vulnerability was found in code-projects Restaurant Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /upd… |
CVE-2024-9359 | High | 7.3 | 2024-10-01 | A vulnerability was found in code-projects Restaurant Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality o… |
CVE-2024-9194 | Critical | 9.8 | 2024-09-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Linux and Microsoft Windows Octopus Server on Windows, Li… |
CVE-2024-46510 | High | 7.6 | 2024-09-30 | ESAFENET CDG v5 was discovered to contain a SQL injection vulnerability via the id parameter in the NavigationAjax interface |
CVE-2024-8379 | High | 7.2 | 2024-09-30 | The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a S… |
CVE-2024-9328 | Medium | 6.3 | 2024-09-29 | A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This issue affects some unknown processing of… |
CVE-2024-9327 | Medium | 6.3 | 2024-09-29 | A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forgot… |
CVE-2024-9326 | High | 7.3 | 2024-09-29 | A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /shopping/admin/… |
CVE-2024-9322 | Medium | 6.3 | 2024-09-29 | A vulnerability was found in code-projects Supply Chain Management 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/… |
CVE-2024-9319 | Medium | 6.3 | 2024-09-29 | A vulnerability, which was classified as critical, was found in SourceCodester Online Timesheet App 1.0. This affects an unknown part of the file /endpoint/del… |
CVE-2024-9318 | Medium | 6.3 | 2024-09-28 | A vulnerability, which was classified as critical, has been found in SourceCodester Advocate Office Management System 1.0. Affected by this issue is some unkno… |
CVE-2024-9317 | Medium | 6.3 | 2024-09-28 | A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is the function delete_category of t… |
CVE-2024-9316 | Medium | 6.3 | 2024-09-28 | A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/blo… |
CVE-2024-9315 | Medium | 6.3 | 2024-09-28 | A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown p… |
CVE-2024-9296 | High | 7.3 | 2024-09-28 | A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been classified as critical. Affected is an unknown function of the f… |
CVE-2024-9295 | High | 7.3 | 2024-09-28 | A vulnerability was found in SourceCodester Advocate Office Management System 1.0 and classified as critical. This issue affects some unknown processing of the… |
CVE-2024-9294 | Medium | 6.3 | 2024-09-27 | A vulnerability, which was classified as critical, has been found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. Affected by this issue is so… |
CVE-2024-9293 | Medium | 6.3 | 2024-09-27 | A vulnerability classified as critical was found in skyselang yylAdmin up to 3.0. Affected by this vulnerability is the function list of the file /app/admin/co… |
CVE-2024-46257 | Medium | 6.3 | 2024-09-27 | A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via… |
CVE-2024-8630 | Critical | 9.4 | 2024-09-27 | Alisonic Sibylla devices are vulnerable to SQL injection attacks, which could allow complete access to the database. |
CVE-2024-46472 | High | 8.6 | 2024-09-27 | CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page. |
CVE-2024-3373 | | 2024-09-27 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RSM Design Website Template allows SQL Injection. This i… | |
CVE-2024-8607 | Critical | 9.8 | 2024-09-27 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oceanic Software ValeApp allows SQL Injection. This issu… |
CVE-2024-9130 | High | 7.2 | 2024-09-27 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions… |
CVE-2024-8275 | Critical | 9.8 | 2024-09-25 | The The Events Calendar plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tribe_has_next_event' function in all versions up… |
CVE-2024-7385 | Critical | 9.1 | 2024-09-25 | The WordPress Simple HTML Sitemap plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.1 due to i… |