CWE-89 · SQL Injection (page 88)
Page 88 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-7751 | Medium | 6.3 | 2024-08-13 | A vulnerability was found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. Affected by this issue is some unknown functional… |
CVE-2024-7750 | Medium | 6.3 | 2024-08-13 | A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2024-7748 | Medium | 6.3 | 2024-08-13 | A vulnerability, which was classified as critical, has been found in SourceCodester Accounts Manager App 1.0. This issue affects some unknown processing of the… |
CVE-2024-43360 | Critical | 9.8 | 2024-08-12 | ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder is affected by a time-based SQL Injection vulnerability. This vuln… |
CVE-2023-41884 | High | 7.1 | 2024-08-12 | ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query without sa… |
CVE-2024-7682 | High | 7.3 | 2024-08-12 | A vulnerability was found in code-projects Job Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file rw_i_nat.php… |
CVE-2024-7681 | High | 7.3 | 2024-08-12 | A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2024-7680 | Medium | 6.3 | 2024-08-12 | A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /incedi… |
CVE-2024-7676 | Medium | 6.3 | 2024-08-12 | A vulnerability was found in Sourcecodester Car Driving School Management System 1.0. It has been classified as critical. Affected is the function save_package… |
CVE-2024-7669 | Medium | 6.3 | 2024-08-12 | A vulnerability was found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This issue affects the function delete_enrollm… |
CVE-2024-7668 | Medium | 6.3 | 2024-08-12 | A vulnerability has been found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This vulnerability affects the function d… |
CVE-2024-7667 | Medium | 6.3 | 2024-08-12 | A vulnerability, which was classified as critical, was found in SourceCodester Car Driving School Management System 1.0. This affects the function delete_users… |
CVE-2024-7666 | Medium | 6.3 | 2024-08-12 | A vulnerability, which was classified as critical, has been found in SourceCodester Car Driving School Management System 1.0. Affected by this issue is some un… |
CVE-2024-7665 | Medium | 6.3 | 2024-08-12 | A vulnerability classified as critical was found in SourceCodester Car Driving School Management System 1.0. Affected by this vulnerability is an unknown funct… |
CVE-2024-7664 | Medium | 6.3 | 2024-08-12 | A vulnerability classified as critical has been found in SourceCodester Car Driving School Management System 1.0. Affected is an unknown function of the file v… |
CVE-2024-7663 | Medium | 6.3 | 2024-08-12 | A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as critical. This issue affects some unknown processing… |
CVE-2024-7643 | Medium | 6.3 | 2024-08-12 | A vulnerability was found in SourceCodester Leads Manager Tool 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2024-7642 | Medium | 6.3 | 2024-08-12 | A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. Affected by this vulnerability i… |
CVE-2024-7641 | Medium | 6.3 | 2024-08-12 | A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected is an unknown functi… |
CVE-2024-7640 | Medium | 6.3 | 2024-08-12 | A vulnerability, which was classified as critical, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This issue affects some… |
CVE-2024-7639 | Medium | 6.3 | 2024-08-12 | A vulnerability classified as critical was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This vulnerability affects unknown code o… |
CVE-2024-7638 | Medium | 6.3 | 2024-08-12 | A vulnerability classified as critical has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the… |
CVE-2024-7637 | High | 7.3 | 2024-08-12 | A vulnerability was found in code-projects Online Polling 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2024-7636 | High | 7.3 | 2024-08-12 | A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functional… |
CVE-2024-7635 | High | 7.3 | 2024-08-12 | A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been classified as critical. Affected is an unknown function of the file register_… |
CVE-2024-5527 | High | 8.3 | 2024-08-12 | Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration. |
CVE-2024-5487 | High | 8.3 | 2024-08-12 | Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option. |
CVE-2024-40486 | Critical | 9.8 | 2024-08-12 | A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Log… |
CVE-2024-40479 | High | 8.1 | 2024-08-12 | A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via t… |
CVE-2024-40477 | Critical | 9.8 | 2024-08-12 | A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 allows an attacker to execute arbitrary S… |
CVE-2024-40472 | Critical | 9.8 | 2024-08-12 | Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php." |
CVE-2024-36518 | High | 8.3 | 2024-08-12 | Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard. |
CVE-2024-36035 | High | 8.3 | 2024-08-12 | Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording. |
CVE-2024-36034 | High | 8.3 | 2024-08-12 | Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option. |
CVE-2024-7477 | Medium | 6.5 | 2024-08-08 | A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries again… |
CVE-2024-41238 | Medium | 5.3 | 2024-08-08 | A SQL injection vulnerability in /smsa/student_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL comm… |
CVE-2024-42357 | High | 7.3 | 2024-08-08 | Shopware is an open commerce platform. Prior to versions 6.6.5.1 and 6.5.8.13, the Shopware application API contains a search functionality which enables users… |
CVE-2024-7548 | High | 8.8 | 2024-08-08 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'order' parameter in all versions up to, and inclu… |
CVE-2024-7150 | High | 8.8 | 2024-08-08 | The Slider by 10Web – Responsive Image Slider plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and… |
CVE-2024-41237 | Critical | 9.8 | 2024-08-07 | A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL comm… |
CVE-2024-34480 | Critical | 9.8 | 2024-08-07 | SourceCodester Computer Laboratory Management System 1.0 allows admin/category/view_category.php id SQL Injection. |
CVE-2024-34479 | Critical | 9.8 | 2024-08-07 | SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection. |
CVE-2024-42005 | High | 7.3 | 2024-08-07 | An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values() and values_list() methods on models with a JSONField are subject to… |
CVE-2024-33974 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33973 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33972 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33971 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33970 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33969 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33968 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33967 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33966 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33965 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33964 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33963 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33962 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33961 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33960 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33959 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a spec… |
CVE-2024-33958 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the… |
CVE-2024-33957 | Critical | 9.8 | 2024-08-06 | SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the… |
CVE-2024-7505 | High | 7.3 | 2024-08-06 | A vulnerability, which was classified as critical, was found in itsourcecode Bike Delivery System 1.0. Affected is an unknown function of the file contact_us_a… |
CVE-2024-7009 | Medium | 4.2 | 2024-08-06 | Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database. |
CVE-2024-7499 | Medium | 6.3 | 2024-08-06 | A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functi… |
CVE-2024-7498 | High | 7.3 | 2024-08-06 | A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been classified as critical. Affected is the function login/login2 of the file… |
CVE-2023-5000 | High | 8.8 | 2024-08-06 | The Horizontal scrolling announcements plugin for WordPress is vulnerable to SQL Injection via the plugin's 'hsas-shortcode' shortcode in versions up to, and i… |
CVE-2024-7494 | Medium | 6.3 | 2024-08-05 | A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is some unkno… |
CVE-2024-40498 | Critical | 9.8 | 2024-08-05 | SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbitrary code via the register.php |
CVE-2024-7461 | High | 7.3 | 2024-08-05 | A vulnerability was found in ForIP Tecnologia Administração PABX 1.x. It has been rated as critical. Affected by this issue is some unknown functionality of th… |
CVE-2024-7455 | Medium | 6.3 | 2024-08-04 | A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file partedit… |
CVE-2024-7454 | Medium | 6.3 | 2024-08-04 | A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is the functi… |
CVE-2024-7452 | Medium | 6.3 | 2024-08-04 | A vulnerability was found in itsourcecode Placement Management System 1.0. It has been classified as critical. This affects an unknown part of the file view_co… |
CVE-2024-7451 | Medium | 6.3 | 2024-08-04 | A vulnerability was found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of t… |
CVE-2024-7449 | High | 7.3 | 2024-08-04 | A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file login… |
CVE-2024-7446 | Medium | 4.7 | 2024-08-03 | A vulnerability, which was classified as critical, was found in itsourcecode Ticket Reservation System 1.0. This affects an unknown part of the file list_ticke… |
CVE-2024-7445 | Medium | 4.7 | 2024-08-03 | A vulnerability, which was classified as critical, has been found in itsourcecode Ticket Reservation System 1.0. Affected by this issue is some unknown functio… |
CVE-2024-7444 | High | 7.3 | 2024-08-03 | A vulnerability classified as critical was found in itsourcecode Ticket Reservation System 1.0. Affected by this vulnerability is an unknown functionality of t… |
CVE-2024-38889 | Critical | 9.8 | 2024-08-02 | An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform SQL Injec… |
CVE-2024-28298 | High | 8.8 | 2024-08-02 | SQL injection vulnerability in BM SOFT BMPlanning 1.0.0.1 allows authenticated users to execute arbitrary SQL commands via the SEC_IDF, LIE_IDF, PLANF_IDF, CLI… |
CVE-2024-28297 | High | 7.5 | 2024-08-02 | SQL injection vulnerability in AzureSoft MyHorus 4.3.5 allows authenticated users to execute arbitrary SQL commands via unspecified vectors. |
CVE-2024-7378 | Medium | 6.3 | 2024-08-02 | A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. Affected by this issue is some unknown functionality of… |
CVE-2024-7377 | Medium | 6.3 | 2024-08-02 | A vulnerability has been found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. Affected by this vulnerability is an unknown funct… |
CVE-2024-7376 | Medium | 6.3 | 2024-08-02 | A vulnerability, which was classified as critical, was found in SourceCodester Simple Realtime Quiz System 1.0. Affected is an unknown function of the file /pr… |
CVE-2024-7375 | Medium | 6.3 | 2024-08-02 | A vulnerability, which was classified as critical, has been found in SourceCodester Simple Realtime Quiz System 1.0. This issue affects some unknown processing… |
CVE-2024-7374 | Medium | 6.3 | 2024-08-02 | A vulnerability classified as critical was found in SourceCodester Simple Realtime Quiz System 1.0. This vulnerability affects unknown code of the file /manage… |
CVE-2024-7373 | Medium | 6.3 | 2024-08-02 | A vulnerability classified as critical has been found in SourceCodester Simple Realtime Quiz System 1.0. This affects an unknown part of the file /ajax.php?act… |
CVE-2024-7372 | Medium | 6.3 | 2024-08-02 | A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0. It has been rated as critical. Affected by this issue is some unknown functionalit… |
CVE-2024-7371 | Medium | 6.3 | 2024-08-01 | A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown fun… |
CVE-2024-7370 | Medium | 6.3 | 2024-08-01 | A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0. It has been classified as critical. Affected is an unknown function of the file /m… |
CVE-2024-7369 | High | 7.3 | 2024-08-01 | A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. This issue affects some unknown processing of the file… |
CVE-2024-7366 | High | 7.3 | 2024-08-01 | A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0. It has been classified as critical. This affects an unknown part of the… |
CVE-2024-7365 | Medium | 6.3 | 2024-08-01 | A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0 and classified as critical. Affected by this issue is some unknown functi… |
CVE-2024-7364 | Medium | 6.3 | 2024-08-01 | A vulnerability has been found in SourceCodester Tracking Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unk… |
CVE-2024-7363 | Medium | 6.3 | 2024-08-01 | A vulnerability, which was classified as critical, was found in SourceCodester Tracking Monitoring Management System 1.0. Affected is an unknown function of th… |
CVE-2024-7362 | Medium | 6.3 | 2024-08-01 | A vulnerability, which was classified as critical, has been found in SourceCodester Tracking Monitoring Management System 1.0. This issue affects some unknown… |
CVE-2024-7361 | Medium | 6.3 | 2024-08-01 | A vulnerability classified as critical was found in SourceCodester Tracking Monitoring Management System 1.0. This vulnerability affects unknown code of the fi… |
CVE-2024-5678 | Medium | 4.7 | 2024-08-01 | Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature. |
CVE-2024-7327 | Medium | 6.3 | 2024-07-31 | A vulnerability classified as critical was found in Xinhu RockOA 2.6.2. This vulnerability affects the function dataAction of the file /webmain/task/openapi/op… |
CVE-2024-7320 | High | 7.3 | 2024-07-31 | A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affects an unknown part of the file /admin/… |
CVE-2024-7311 | High | 7.3 | 2024-07-31 | A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been rated as critical. This issue affects some unknown processing of the fi… |