CWE-89 · SQL Injection (page 88)
Page 88 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-34032 | High | 8.8 | 2024-05-03 | Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoint. An authenticated attacker can exploi… |
CVE-2024-34031 | High | 8.8 | 2024-05-03 | Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the script Handler_CFG.ashx. An authenticated attacker can exploit… |
CVE-2024-4215 | High | 7.4 | 2024-05-02 | pgAdmin <= 8.5 is affected by a multi-factor authentication bypass vulnerability. This vulnerability allows an attacker with knowledge of a legitimate account’… |
CVE-2024-2876 | Critical | 9.8 | 2024-05-02 | The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to SQL Injec… |
CVE-2024-2831 | High | 8.8 | 2024-05-02 | The Calendar plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcodes in all versions up to, and including, 1.3.14 due to insufficient e… |
CVE-2024-2661 | High | 8.8 | 2024-05-02 | The Barcode Scanner and Inventory manager. POS (Point of Sale) – scan barcodes & create orders with barcode reader. plugin for WordPress is vulnerable to blind… |
CVE-2024-1797 | High | 8.8 | 2024-05-02 | The WP ULike – Most Advanced WordPress Marketing Toolkit plugin for WordPress is vulnerable to SQL Injection via the 'status' and 'id' attributes of the 'wp_ul… |
CVE-2024-1173 | High | 7.2 | 2024-05-02 | The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is vulnerable to time-based SQL Injection… |
CVE-2024-33911 | High | 7.6 | 2024-05-02 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar School Management Pro.This issue affects School… |
CVE-2024-33292 | High | 8.2 | 2024-05-01 | SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter. |
CVE-2024-32212 | High | 8.1 | 2024-05-01 | SQL Injection vulnerability in LOGINT LoMag Inventory Management v1.0.20.120 and before allows an attacker to execute arbitrary code via the ArticleGetGroups… |
CVE-2024-33332 | High | 7.5 | 2024-04-30 | An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant. |
CVE-2024-29320 | High | 8.1 | 2024-04-30 | Wallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to /subscriptions/get.php. |
CVE-2024-33275 | Critical | 9.8 | 2024-04-30 | SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in th… |
CVE-2024-33273 | Critical | 9.8 | 2024-04-30 | SQL injection vulnerability in shipup before v.3.3.0 allows a remote attacker to escalate privileges via the getShopID function. |
CVE-2024-33267 | Critical | 9.8 | 2024-04-30 | SQL Injection vulnerability in Hero hfheropayment v.1.2.5 and before allows an attacker to escalate privileges via the HfHeropaymentGatewayBackModuleFrontContr… |
CVE-2024-28294 | Medium | 6.5 | 2024-04-29 | Limbas up to v5.2.14 was discovered to contain a SQL injection vulnerability via the ftid parameter. |
CVE-2024-33276 | Critical | 9.8 | 2024-04-29 | SQL Injection vulnerability in FME Modules preorderandnotication v.3.1.0 and before allows a remote attacker to run arbitrary SQL commands via the PreorderMode… |
CVE-2024-33272 | Medium | 6.8 | 2024-04-29 | SQL injection vulnerability in KnowBand for PrestaShop autosuggest before 2.0.0 allows an attacker to run arbitrary SQL commands via the AutosuggestSearchModul… |
CVE-2024-33269 | Critical | 9.8 | 2024-04-29 | SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method. |
CVE-2024-33268 | Critical | 9.8 | 2024-04-29 | SQL Injection vulnerability in Digincube mdgiftproduct before 1.4.1 allows an attacker to run arbitrary SQL commands via the MdGiftRule::addGiftToCart method. |
CVE-2024-33266 | Critical | 9.8 | 2024-04-29 | SQL Injection vulnerability in Helloshop deliveryorderautoupdate v.2.8.1 and before allows an attacker to run arbitrary SQL commands via the Deliveryorderautou… |
CVE-2024-31821 | High | 8.0 | 2024-04-29 | SQL Injection vulnerability in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary… |
CVE-2024-31820 | Critical | 9.8 | 2024-04-29 | An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the getLa… |
CVE-2024-33444 | Critical | 9.8 | 2024-04-29 | SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component. |
CVE-2024-32493 | High | 8.8 | 2024-04-29 | An issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in agent is able to inject SQL in the draft form ID para… |
CVE-2024-4309 | High | 8.1 | 2024-04-29 | SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the databas… |
CVE-2024-4308 | High | 8.1 | 2024-04-29 | SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the databas… |
CVE-2024-4307 | High | 8.1 | 2024-04-29 | SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the databas… |
CVE-2024-33546 | Critical | 9.6 | 2024-04-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZo… |
CVE-2024-33544 | Critical | 9.3 | 2024-04-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZo… |
CVE-2024-33559 | Critical | 9.3 | 2024-04-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore allows SQL Injection.This issue affects XSt… |
CVE-2024-33551 | Critical | 9.3 | 2024-04-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore Core allows SQL Injection.This issue affect… |
CVE-2024-4257 | Medium | 6.3 | 2024-04-27 | A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has been classified as critical. This affects an unknown part of the file /x… |
CVE-2024-3342 | Critical | 9.9 | 2024-04-27 | The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to SQL Injection via the 'events' attribute of the 'mp-timetable' shortcode in… |
CVE-2024-28322 | Critical | 9.8 | 2024-04-26 | SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL comma… |
CVE-2024-3060 | Medium | 4.5 | 2024-04-26 | The ENL Newsletter WordPress plugin through 1.0.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admin+ to perform SQL i… |
CVE-2024-3265 | Medium | 4.7 | 2024-04-25 | The Advanced Search WordPress plugin through 1.1.6 does not properly escape parameters appended to an SQL query, making it possible for users with the administ… |
CVE-2024-33247 | High | 8.8 | 2024-04-25 | Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php. |
CVE-2024-32872 | Medium | 5.5 | 2024-04-24 | Umbraco workflow provides workflows for the Umbraco content management system. Prior to versions 10.3.9, 12.2.6, and 13.0.6, an Umbraco Backoffice user can mod… |
CVE-2024-32706 | High | 8.5 | 2024-04-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARFo… |
CVE-2024-32710 | High | 8.5 | 2024-04-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall: fr… |
CVE-2024-32709 | Critical | 9.3 | 2024-04-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall: fr… |
CVE-2024-28613 | Critical | 9.8 | 2024-04-24 | SQL Injection vulnerability in PHP Task Management System v.1.0 allows a remote attacker to escalate privileges and obtain sensitive information via the task_i… |
CVE-2024-4093 | Medium | 6.3 | 2024-04-24 | A vulnerability, which was classified as critical, was found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of the file vie… |
CVE-2024-4071 | Medium | 6.3 | 2024-04-23 | A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0 and classified as critical. This issue affects some unknown processing o… |
CVE-2024-4070 | Medium | 6.3 | 2024-04-23 | A vulnerability has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0 and classified as critical. This vulnerability affects unknown code… |
CVE-2024-4069 | Medium | 6.3 | 2024-04-23 | A vulnerability, which was classified as critical, was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the… |
CVE-2024-31077 | High | 7.2 | 2024-04-23 | Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenticated attacker with an administrative p… |
CVE-2024-3293 | High | 8.8 | 2024-04-23 | The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to blind SQL Injection via the rtmedia_gallery shortcode in all versions u… |
CVE-2024-32480 | High | 7.2 | 2024-04-22 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Versions prior to 24.4.0 are vulnerable to SQL injection. The `order` parameter is… |
CVE-2024-32461 | High | 7.1 | 2024-04-22 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A SQL injection vulnerability in POST /search/search=packages in LibreNMS prior to… |
CVE-2024-27574 | Critical | 9.1 | 2024-04-22 | SQL Injection vulnerability in Trainme Academy version Ichin v.1.3.2 allows a remote attacker to obtain sensitive information via the informacion, idcurso, and… |
CVE-2024-31545 | Critical | 9.4 | 2024-04-22 | Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manage_user&id=6. |
CVE-2024-22856 | Medium | 5.4 | 2024-04-22 | A SQL injection vulnerability via the Save Favorite Search function in Axefinance Axe Credit Portal >= v.3.0 allows authenticated attackers to execute unintend… |
CVE-2024-30974 | High | 7.3 | 2024-04-19 | SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter. |
CVE-2024-31547 | Critical | 9.1 | 2024-04-19 | Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/item/view_item.php. |
CVE-2024-31546 | Critical | 9.8 | 2024-04-19 | Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/view_damage.php. |
CVE-2024-31750 | Critical | 9.8 | 2024-04-19 | SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter. |
CVE-2024-30938 | Critical | 9.8 | 2024-04-19 | SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMS_User.php component. |
CVE-2024-30928 | High | 8.1 | 2024-04-18 | SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc |
CVE-2024-30922 | Critical | 9.8 | 2024-04-18 | SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering. |
CVE-2024-32602 | High | 7.6 | 2024-04-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.T… |
CVE-2024-32551 | High | 7.6 | 2024-04-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Manager.This issue affe… |
CVE-2024-29001 | High | 7.5 | 2024-04-18 | A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface. This vulnerability requires authentication and user interaction to be… |
CVE-2024-30990 | Critical | 9.8 | 2024-04-17 | SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL comman… |
CVE-2024-30985 | Critical | 9.8 | 2024-04-17 | SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL c… |
CVE-2024-30982 | Critical | 9.8 | 2024-04-17 | SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arbitrary SQL commands via the upid parame… |
CVE-2024-30983 | High | 7.3 | 2024-04-17 | SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arbitrary SQL commands via the compname pa… |
CVE-2024-30981 | Critical | 9.8 | 2024-04-17 | SQL Injection vulnerability in /edit-computer-detail.php in phpgurukul Cyber Cafe Management System Using PHP & MySQL v1.0 allows attackers to run arbitrary SQ… |
CVE-2024-30980 | Critical | 9.8 | 2024-04-17 | SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arbitrary SQL commands via the Computer Lo… |
CVE-2022-47151 | High | 8.6 | 2024-04-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plug… |
CVE-2024-3067 | High | 7.2 | 2024-04-16 | The WooCommerce Google Feed Manager plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 2.4.2 due… |
CVE-2024-1601 | Critical | 9.8 | 2024-04-16 | An SQL injection vulnerability exists in the `delete_discussion()` function of the parisneo/lollms-webui application, allowing an attacker to delete all discus… |
CVE-2023-45503 | Medium | 5.3 | 2024-04-15 | SQL Injection vulnerability in Macrob7 Macs CMS 1.1.4f, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), escalate privileges… |
CVE-2024-28558 | High | 8.8 | 2024-04-15 | SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and… |
CVE-2024-28557 | Critical | 9.8 | 2024-04-15 | SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obta… |
CVE-2024-28556 | Critical | 9.8 | 2024-04-15 | SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obta… |
CVE-2024-3797 | Medium | 6.3 | 2024-04-15 | A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2024-32139 | High | 8.5 | 2024-04-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podl… |
CVE-2024-32137 | High | 8.5 | 2024-04-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin User Activity Log Pro.This issue affects User Acti… |
CVE-2024-32136 | High | 7.6 | 2024-04-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xenioushk BWL Advanced FAQ Manager.This issue affects BWL… |
CVE-2024-32135 | High | 7.6 | 2024-04-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPZest Disable Comments | WPZest.This issue affects Disab… |
CVE-2024-32134 | High | 7.6 | 2024-04-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nasirahmed Forms to Zapier, Integromat, IFTTT, Workato, A… |
CVE-2024-32132 | High | 7.6 | 2024-04-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codeboxr Team CBX Bookmark & Favorite.This issue affects… |
CVE-2024-32128 | Critical | 9.3 | 2024-04-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Realtyna Realtyna Organic IDX plugin.This issue affects R… |
CVE-2024-32127 | High | 8.5 | 2024-04-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Markus Seyer Find Duplicates.This issue affects Find Dupl… |
CVE-2024-32125 | High | 8.5 | 2024-04-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booking Algorithms BA Book Everything.This issue affects… |
CVE-2024-32098 | High | 7.6 | 2024-04-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Page Visit Counter Advanced Page Visit Counter.This issue… |
CVE-2024-32087 | High | 7.6 | 2024-04-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExportFeed.Com Product Feed on WooCommerce for Google.Thi… |
CVE-2024-3771 | Medium | 6.3 | 2024-04-15 | A vulnerability was found in PHPGurukul Student Record System 3.20 and classified as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2024-3770 | Medium | 6.3 | 2024-04-15 | A vulnerability has been found in PHPGurukul Student Record System 3.20 and classified as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2024-0399 | High | 8.1 | 2024-04-15 | The WooCommerce Customers Manager WordPress plugin before 29.7 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to… |
CVE-2024-3769 | High | 7.3 | 2024-04-15 | A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an unknown function of the file /login.php… |
CVE-2024-3768 | Medium | 6.3 | 2024-04-15 | A vulnerability, which was classified as critical, has been found in PHPGurukul/itsourcecode News Portal 4.1. This issue affects some unknown processing of the… |
CVE-2024-3767 | Medium | 6.3 | 2024-04-15 | A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. This vulnerability affects unknown code of the file /admin/edit-post.php. The m… |
CVE-2024-3720 | Medium | 6.3 | 2024-04-13 | A vulnerability has been found in Tianwell Fire Intelligent Command Platform 1.1.1.1 and classified as critical. This vulnerability affects unknown code of the… |
CVE-2024-3719 | Medium | 6.3 | 2024-04-13 | A vulnerability, which was classified as critical, was found in Campcodes House Rental Management System 1.0. This affects an unknown part of the file ajax.php… |
CVE-2024-3698 | Medium | 6.3 | 2024-04-12 | A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown funct… |
CVE-2024-3697 | Medium | 6.3 | 2024-04-12 | A vulnerability was found in Campcodes House Rental Management System 1.0. It has been classified as critical. Affected is an unknown function of the file mana… |