CWE-89 · SQL Injection (page 85)
Page 85 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-8621 | Critical | 9.9 | 2024-09-25 | The Daily Prayer Time plugin for WordPress is vulnerable to SQL Injection via the 'max_word' attribute of the 'quran_verse' shortcode in all versions up to, an… |
CVE-2024-8484 | High | 7.5 | 2024-09-25 | The REST API TO MiniProgram plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the /wp-json/watch-life-net/v1/comment/getcomments… |
CVE-2024-8877 | Critical | 9.8 | 2024-09-25 | Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measure… |
CVE-2024-8436 | Critical | 9.9 | 2024-09-25 | The WP Easy Gallery – WordPress Gallery Plugin plugin for WordPress is vulnerable to SQL Injection via the 'edit_imageId' and 'edit_imageDelete' parameters in… |
CVE-2024-8624 | Critical | 9.9 | 2024-09-24 | The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'meta_key' attribute of the 'mdf_select_title' shortcode… |
CVE-2024-39843 | Medium | 6.7 | 2024-09-23 | A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via create user form inputs. |
CVE-2024-39842 | High | 7.2 | 2024-09-23 | A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via user massive changes inputs. |
CVE-2024-7735 | | 2024-09-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Exnet Informatics Software Ferry Reservation System allow… | |
CVE-2024-9094 | Medium | 6.3 | 2024-09-23 | A vulnerability classified as critical was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file /admin/blood/updat… |
CVE-2024-9093 | Medium | 6.3 | 2024-09-23 | A vulnerability classified as critical has been found in SourceCodester Profile Registration without Reload Refresh 1.0. This affects an unknown part of the fi… |
CVE-2024-9091 | High | 7.3 | 2024-09-23 | A vulnerability was found in code-projects Student Record System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functional… |
CVE-2024-9090 | Medium | 6.3 | 2024-09-23 | A vulnerability was found in SourceCodester Modern Loan Management System 1.0. It has been classified as critical. Affected is an unknown function of the file… |
CVE-2024-9087 | High | 7.3 | 2024-09-22 | A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. This affects an unknown part of the file /edit1.php. The… |
CVE-2024-9086 | Medium | 6.3 | 2024-09-22 | A vulnerability classified as critical has been found in code-projects Restaurant Reservation System 1.0. Affected is an unknown function of the file /filter.p… |
CVE-2024-9085 | High | 7.3 | 2024-09-22 | A vulnerability was found in code-projects Restaurant Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the… |
CVE-2024-9081 | Medium | 6.3 | 2024-09-22 | A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2024-9080 | High | 7.3 | 2024-09-22 | A vulnerability was found in code-projects Student Record System 1.0. It has been classified as critical. Affected is an unknown function of the file /pincode-… |
CVE-2024-9079 | High | 7.3 | 2024-09-22 | A vulnerability was found in code-projects Student Record System 1.0 and classified as critical. This issue affects some unknown processing of the file /marks… |
CVE-2024-9078 | High | 7.3 | 2024-09-22 | A vulnerability has been found in code-projects Student Record System 1.0 and classified as critical. This vulnerability affects unknown code of the file /cour… |
CVE-2024-47062 | High | 8.8 | 2024-09-20 | Navidrome is an open source web-based music collection server and streamer. Navidrome automatically adds parameters in the URL to SQL queries. This can be expl… |
CVE-2024-9041 | Medium | 6.3 | 2024-09-20 | A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of… |
CVE-2024-9039 | High | 7.3 | 2024-09-20 | A vulnerability, which was classified as critical, has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is some unk… |
CVE-2024-9037 | High | 7.3 | 2024-09-20 | A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The ma… |
CVE-2024-9035 | High | 7.3 | 2024-09-20 | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admi… |
CVE-2024-9034 | High | 7.3 | 2024-09-20 | A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionalit… |
CVE-2024-9011 | Medium | 6.3 | 2024-09-20 | A vulnerability, which was classified as critical, was found in code-projects Crud Operation System 1.0. Affected is an unknown function of the file updata.php… |
CVE-2024-9009 | Medium | 6.3 | 2024-09-20 | A vulnerability, which was classified as critical, has been found in code-projects Online Quiz Site 1.0. This issue affects some unknown processing of the file… |
CVE-2024-9008 | Medium | 6.3 | 2024-09-19 | A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-detai… |
CVE-2024-46382 | High | 7.5 | 2024-09-19 | A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name paramete… |
CVE-2024-46374 | Critical | 9.8 | 2024-09-18 | Best House Rental Management System 1.0 contains a SQL injection vulnerability in the delete_category() function of the file rental/admin_class.php. |
CVE-2024-5958 | High | 8.8 | 2024-09-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command Line Execution through… |
CVE-2024-44542 | Critical | 9.8 | 2024-09-18 | SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter. |
CVE-2022-25775 | Medium | 6.6 | 2024-09-18 | Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle. The user could retrieve and al… |
CVE-2024-42404 | High | 8.8 | 2024-09-18 | SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the information stored in… |
CVE-2024-44004 | Critical | 9.3 | 2024-09-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injec… |
CVE-2024-43978 | Critical | 9.3 | 2024-09-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp.This is… |
CVE-2024-43976 | Critical | 9.3 | 2024-09-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp.This is… |
CVE-2024-43969 | High | 7.6 | 2024-09-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins Spiffy Calendar allows SQL Injection.This… |
CVE-2024-8945 | Medium | 5.5 | 2024-09-17 | A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical. This vulnerability affects unknown code of the fil… |
CVE-2024-8944 | High | 7.3 | 2024-09-17 | A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. This affects an unknown part of the file check_av… |
CVE-2024-6401 | Critical | 9.8 | 2024-09-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting InsureE GL allows SQL Injection. This iss… |
CVE-2024-8868 | High | 7.3 | 2024-09-15 | A vulnerability was found in code-projects Crud Operation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file sav… |
CVE-2024-8669 | Critical | 9.1 | 2024-09-14 | The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the 'options' parameter passed to the backuply_wp_clo… |
CVE-2024-44430 | Critical | 9.8 | 2024-09-13 | SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary code and obtain sensitive information via… |
CVE-2024-8784 | Medium | 6.3 | 2024-09-13 | A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of t… |
CVE-2024-6723 | Medium | 4.7 | 2024-09-13 | The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection ex… |
CVE-2024-8762 | Medium | 6.3 | 2024-09-13 | A vulnerability was found in code-projects Crud Operation System 1.0. It has been classified as critical. This affects an unknown part of the file /updatedata… |
CVE-2024-34334 | High | 7.5 | 2024-09-12 | ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function. |
CVE-2024-8749 | High | 8.8 | 2024-09-12 | SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially crafted query to the ID parameter in /var/w… |
CVE-2024-8529 | Critical | 10.0 | 2024-09-12 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter of the /wp-json/lp/v1/courses/archive-co… |
CVE-2024-8522 | Critical | 10.0 | 2024-09-12 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parameter of the /wp-json/learnpress/v1/cours… |
CVE-2024-7766 | High | 7.2 | 2024-09-12 | The Adicon Server WordPress plugin through 1.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL inje… |
CVE-2024-8710 | Medium | 6.3 | 2024-09-12 | A vulnerability classified as critical was found in code-projects Inventory Management 1.0. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2024-8709 | Medium | 6.3 | 2024-09-12 | A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is the function delete_user/save_user… |
CVE-2024-34785 | High | 7.2 | 2024-09-12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achiev… |
CVE-2024-34783 | High | 7.2 | 2024-09-12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achiev… |
CVE-2024-34779 | High | 7.2 | 2024-09-12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achiev… |
CVE-2024-32848 | High | 7.2 | 2024-09-12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achiev… |
CVE-2024-32846 | High | 7.2 | 2024-09-12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achiev… |
CVE-2024-32845 | High | 7.2 | 2024-09-12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achiev… |
CVE-2024-32843 | High | 7.2 | 2024-09-12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achiev… |
CVE-2024-32842 | High | 7.2 | 2024-09-12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achiev… |
CVE-2024-32840 | High | 7.2 | 2024-09-12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achiev… |
CVE-2024-8705 | Medium | 6.3 | 2024-09-11 | A vulnerability was found in Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System 5.6.2 and classified as critical. Affec… |
CVE-2024-44541 | Critical | 9.8 | 2024-09-11 | evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin." |
CVE-2024-42760 | High | 7.5 | 2024-09-11 | SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios com… |
CVE-2024-27112 | Critical | 9.8 | 2024-09-11 | A unauthenticated SQL Injection has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerab… |
CVE-2019-25212 | Medium | 4.9 | 2024-09-11 | The video carousel slider with lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.6… |
CVE-2024-8191 | High | 7.8 | 2024-09-10 | SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote… |
CVE-2024-8503 | Critical | 9.8 | 2024-09-10 | An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. By default, VICIdial stores plaint… |
CVE-2024-43040 | Critical | 9.1 | 2024-09-10 | Renwoxing Enterprise Intelligent Management System before v3.0 was discovered to contain a SQL injection vulnerability via the parid parameter at /fx/baseinfo/… |
CVE-2024-8611 | Medium | 6.3 | 2024-09-09 | A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2024-6795 | Critical | 10.0 | 2024-09-09 | In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthor… |
CVE-2024-44725 | High | 7.2 | 2024-09-09 | AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php. |
CVE-2024-8570 | Medium | 6.3 | 2024-09-08 | A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of t… |
CVE-2024-6928 | Critical | 9.8 | 2024-09-08 | The Opti Marketing WordPress plugin through 2.0.9 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action avail… |
CVE-2024-6924 | Critical | 9.8 | 2024-09-08 | The TrueBooker WordPress plugin before 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available… |
CVE-2024-8569 | High | 7.3 | 2024-09-08 | A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functio… |
CVE-2024-8568 | Medium | 6.3 | 2024-09-08 | A vulnerability, which was classified as critical, was found in Mini-Tmall up to 20240901. Affected is the function rewardMapper.select of the file tmall/admin… |
CVE-2024-8567 | High | 7.3 | 2024-09-08 | A vulnerability, which was classified as critical, has been found in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of… |
CVE-2024-8565 | High | 7.3 | 2024-09-07 | A vulnerability was found in SourceCodesters Clinics Patient Management System 2.0. It has been rated as critical. This issue affects some unknown processing o… |
CVE-2024-8564 | Medium | 6.3 | 2024-09-07 | A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/updat… |
CVE-2024-8561 | Medium | 6.3 | 2024-09-07 | A vulnerability has been found in SourceCodester PHP CRUD 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2024-8560 | Medium | 6.3 | 2024-09-07 | A vulnerability, which was classified as critical, was found in SourceCodester Simple Invoice Generator System 1.0. Affected is an unknown function of the file… |
CVE-2024-8559 | Medium | 4.7 | 2024-09-07 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Food Menu 1.0. This issue affects some unknown processing of the fil… |
CVE-2024-8557 | Medium | 6.3 | 2024-09-07 | A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. This affects an unknown part of the file /foms/rou… |
CVE-2024-7112 | High | 8.8 | 2024-09-07 | The Pinpoint Booking System – #1 WordPress Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘schedule’ parameter in all versions up t… |
CVE-2024-45771 | Critical | 9.8 | 2024-09-06 | RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php. |
CVE-2024-44839 | Critical | 9.8 | 2024-09-06 | RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php. |
CVE-2024-44838 | Critical | 9.8 | 2024-09-06 | RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php. |
CVE-2023-50360 | High | 8.8 | 2024-09-06 | A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious co… |
CVE-2024-44739 | High | 8.8 | 2024-09-06 | Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manage_user&id=. |
CVE-2024-7349 | High | 7.2 | 2024-09-06 | The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to blind SQL Injection via the 'order' parameter in all vers… |
CVE-2024-8395 | Critical | 9.8 | 2024-09-05 | FlyCASS CASS and KCM systems did not correctly filter SQL queries, which made them vulnerable to attack by outside attackers with no authentication. |
CVE-2024-44727 | Critical | 9.8 | 2024-09-05 | Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php. |
CVE-2024-42885 | Critical | 9.1 | 2024-09-05 | SQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute arbitrary code via the id parameter of the data.jsp page. |
CVE-2024-44587 | High | 8.8 | 2024-09-05 | itsourcecode Alton Management System 1.0 is vulnerable to SQL Injection in /noncombo_save.php via the "menu" parameter. |
CVE-2024-8470 | Critical | 9.8 | 2024-09-05 | SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php… |
CVE-2024-8469 | Critical | 9.8 | 2024-09-05 | SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrie… |
CVE-2024-8468 | Critical | 9.8 | 2024-09-05 | SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the… |