CWE-89 · SQL Injection (page 91)
Page 91 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-6279 | Medium | 6.3 | 2024-06-24 | A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this issue is some unknown functionali… |
CVE-2024-6278 | Medium | 4.7 | 2024-06-24 | A vulnerability has been found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2024-6277 | Medium | 4.7 | 2024-06-24 | A vulnerability, which was classified as critical, was found in lahirudanushka School Management System 1.0.0/1.0.1. Affected is an unknown function of the fil… |
CVE-2024-6276 | Medium | 4.7 | 2024-06-24 | A vulnerability, which was classified as critical, has been found in lahirudanushka School Management System 1.0.0/1.0.1. This issue affects some unknown proce… |
CVE-2024-6275 | Medium | 4.7 | 2024-06-24 | A vulnerability classified as critical was found in lahirudanushka School Management System 1.0.0/1.0.1. This vulnerability affects unknown code of the file pa… |
CVE-2024-6274 | Medium | 4.7 | 2024-06-24 | A vulnerability classified as critical has been found in lahirudanushka School Management System 1.0.0/1.0.1. This affects an unknown part of the file /attenda… |
CVE-2024-6268 | High | 7.3 | 2024-06-23 | A vulnerability, which was classified as critical, has been found in lahirudanushka School Management System 1.0.0/1.0.1. Affected by this issue is some unknow… |
CVE-2024-6266 | Medium | 6.3 | 2024-06-23 | A vulnerability classified as critical has been found in Pear Admin Boot up to 2.0.2. Affected is an unknown function of the file /system/dictData/loadDictItem… |
CVE-2024-6253 | High | 7.3 | 2024-06-22 | A vulnerability was found in itsourcecode Online Food Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of t… |
CVE-2024-21514 | High | 7.4 | 2024-06-22 | This affects versions of the package opencart/opencart from 0.0.0. An SQL Injection issue was identified in the Divido payment extension for OpenCart, which is… |
CVE-2024-34989 | Critical | 9.8 | 2024-06-21 | In the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop, a guest can perform SQL injection via `PrestaPDFProductListModuleFro… |
CVE-2024-6241 | Medium | 6.3 | 2024-06-21 | A vulnerability was found in Pear Admin Boot up to 2.0.2 and classified as critical. This issue affects the function getDictItems of the file /system/dictData/… |
CVE-2024-6027 | Critical | 9.8 | 2024-06-21 | The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to time-based SQL Injection via the ‘conditions’ parameter in all versions up to, a… |
CVE-2024-5756 | Critical | 9.8 | 2024-06-21 | The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to time-base… |
CVE-2024-6218 | High | 7.3 | 2024-06-21 | A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. Affected by this issue is some unknown functio… |
CVE-2024-6217 | Medium | 6.3 | 2024-06-21 | A vulnerability classified as critical was found in SourceCodester Food Ordering Management System 1.0. Affected by this vulnerability is an unknown functional… |
CVE-2024-6216 | Medium | 6.3 | 2024-06-21 | A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file add-us… |
CVE-2024-6215 | Medium | 6.3 | 2024-06-21 | A vulnerability was found in SourceCodester Food Ordering Management System up to 1.0. It has been rated as critical. This issue affects some unknown processin… |
CVE-2024-6214 | Medium | 6.3 | 2024-06-21 | A vulnerability was found in SourceCodester Food Ordering Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of t… |
CVE-2024-6213 | High | 7.3 | 2024-06-21 | A vulnerability was found in SourceCodester Food Ordering Management System up to 1.0. It has been classified as critical. This affects an unknown part of the… |
CVE-2024-6212 | Low | 3.5 | 2024-06-21 | A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function get_stud… |
CVE-2024-29390 | High | 7.3 | 2024-06-20 | Daily Expenses Management System version 1.0, developed by PHP Gurukul, contains a time-based blind SQL injection vulnerability in the 'add-expense.php' page… |
CVE-2024-37699 | Critical | 9.8 | 2024-06-20 | An issue in DataLife Engine v.17.1 and before is vulnerable to SQL Injection in dboption. |
CVE-2024-6196 | High | 7.3 | 2024-06-20 | A vulnerability was found in itsourcecode Banking Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2024-6195 | Medium | 6.3 | 2024-06-20 | A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functio… |
CVE-2024-6194 | Medium | 6.3 | 2024-06-20 | A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file editm… |
CVE-2024-6193 | High | 7.3 | 2024-06-20 | A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. This issue affects some unknown processing of… |
CVE-2024-6192 | High | 7.3 | 2024-06-20 | A vulnerability classified as critical was found in itsourcecode Loan Management System 1.0. This vulnerability affects unknown code of the file login.php of t… |
CVE-2024-6191 | High | 7.3 | 2024-06-20 | A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unknown part of the file login.php of the… |
CVE-2024-6190 | High | 7.3 | 2024-06-20 | A vulnerability was found in itsourcecode Farm Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of th… |
CVE-2024-6113 | High | 7.3 | 2024-06-20 | A vulnerability was found in itsourcecode Monbela Tourist Inn Online Reservation System 1.0. It has been rated as critical. This issue affects some unknown pro… |
CVE-2024-5522 | Medium | 6.5 | 2024-06-20 | The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing… |
CVE-2024-5605 | High | 8.8 | 2024-06-20 | The Media Library Assistant plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter within the mla_tag_cloud Shortcode in all… |
CVE-2024-4742 | Medium | 6.5 | 2024-06-20 | The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the… |
CVE-2024-3605 | Critical | 10.0 | 2024-06-20 | The WP Hotel Booking plugin for WordPress is vulnerable to SQL Injection via the 'room_type' parameter of the /wphb/v1/rooms/search-rooms REST API endpoint in… |
CVE-2024-3561 | High | 8.8 | 2024-06-20 | The Custom Field Suite plugin for WordPress is vulnerable to SQL Injection via the the 'Term' custom field in all versions up to, and including, 2.6.7 due to i… |
CVE-2024-36684 | Critical | 9.8 | 2024-06-19 | In the module "Custom links" (pk_customlinks) <= 2.3 from Promokit.eu for PrestaShop, a guest can perform SQL injection. The script ajax.php have a sensitive S… |
CVE-2024-36680 | High | 7.5 | 2024-06-19 | In the module "Facebook" (pkfacebook) <=1.0.1 from Promokit.eu for PrestaShop, a guest can perform SQL injection. The ajax script facebookConnect.php have a se… |
CVE-2024-36678 | Critical | 9.8 | 2024-06-19 | In the module "Theme settings" (pk_themesettings) <= 1.8.8 from Promokit.eu for PrestaShop, a guest can perform SQL injection. The script ajax.php have a sensi… |
CVE-2024-34994 | Critical | 9.8 | 2024-06-19 | In the module "Channable" (channable) up to version 3.2.1 from Channable for PrestaShop, a guest can perform SQL injection via `ChannableFeedModuleFrontControl… |
CVE-2024-34993 | Medium | 6.3 | 2024-06-19 | In the module "Bulk Export products to Google Merchant-Google Shopping" (bagoogleshopping) up to version 1.0.26 from Buy Addons for PrestaShop, a guest can per… |
CVE-2024-37791 | Medium | 6.0 | 2024-06-18 | DuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter at /article/Content/index?class_id. |
CVE-2024-38348 | High | 8.8 | 2024-06-18 | CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu para… |
CVE-2024-38347 | High | 8.8 | 2024-06-18 | CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Room Information module via the id para… |
CVE-2024-37802 | High | 8.8 | 2024-06-18 | CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Patient Info module via the searvalu pa… |
CVE-2024-37799 | Medium | 5.4 | 2024-06-18 | CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reserv_id parameter at view_reservations.php. |
CVE-2024-6112 | High | 7.3 | 2024-06-18 | A vulnerability classified as critical was found in itsourcecode Pool of Bethesda Online Reservation System 1.0. This vulnerability affects unknown code of the… |
CVE-2024-6111 | High | 7.3 | 2024-06-18 | A vulnerability classified as critical has been found in itsourcecode Pool of Bethesda Online Reservation System 1.0. This affects an unknown part of the file… |
CVE-2024-6109 | Medium | 6.3 | 2024-06-18 | A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown funct… |
CVE-2024-6067 | Medium | 6.3 | 2024-06-17 | A vulnerability classified as critical was found in SourceCodester Music Class Enrollment System 1.0. Affected by this vulnerability is an unknown functionalit… |
CVE-2024-6066 | Medium | 6.3 | 2024-06-17 | A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file pa… |
CVE-2024-6065 | High | 7.3 | 2024-06-17 | A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the f… |
CVE-2024-37896 | High | 8.8 | 2024-06-17 | Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin <= v2.6.5 has SQL injection vulnerability. The SQL injection vulnerabilities… |
CVE-2024-37840 | High | 8.8 | 2024-06-17 | SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to exec… |
CVE-2024-37848 | High | 8.4 | 2024-06-17 | SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admin_delete.php component. |
CVE-2024-6043 | High | 7.3 | 2024-06-17 | A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file ad… |
CVE-2024-6042 | High | 7.3 | 2024-06-17 | A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionalit… |
CVE-2024-6041 | Medium | 6.3 | 2024-06-16 | A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2024-6039 | Medium | 6.3 | 2024-06-16 | A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipula… |
CVE-2024-6016 | Medium | 6.3 | 2024-06-15 | A vulnerability, which was classified as critical, has been found in itsourcecode Online Laundry Management System 1.0. Affected by this issue is some unknown… |
CVE-2024-6015 | Medium | 6.3 | 2024-06-15 | A vulnerability classified as critical was found in itsourcecode Online House Rental System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2024-6014 | Medium | 6.3 | 2024-06-15 | A vulnerability classified as critical has been found in itsourcecode Document Management System 1.0. Affected is an unknown function of the file edithis.php… |
CVE-2024-6013 | Medium | 6.3 | 2024-06-15 | A vulnerability was found in itsourcecode Online Book Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin_de… |
CVE-2024-6009 | Medium | 6.3 | 2024-06-15 | A vulnerability has been found in itsourcecode Event Calendar 1.0 and classified as critical. Affected by this vulnerability is the function regConfirm/regDele… |
CVE-2024-6008 | Medium | 6.3 | 2024-06-15 | A vulnerability, which was classified as critical, was found in itsourcecode Online Book Store up to 1.0. Affected is an unknown function of the file /edit_boo… |
CVE-2024-6007 | Medium | 6.3 | 2024-06-15 | A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /protocol/… |
CVE-2024-6003 | High | 7.3 | 2024-06-14 | A vulnerability was found in Guangdong Baolun Electronics IP Network Broadcasting Service Platform 2.0. It has been classified as critical. Affected is an unkn… |
CVE-2024-37831 | Critical | 9.8 | 2024-06-14 | Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payroll_items.php via the ID parameter. |
CVE-2024-36597 | High | 8.8 | 2024-06-14 | Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the client_id parameter at clientStatus.php. |
CVE-2024-5985 | Medium | 6.3 | 2024-06-14 | A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. This affects an unknown part of the file /admin/index.php… |
CVE-2024-5984 | High | 7.3 | 2024-06-14 | A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2024-5983 | High | 7.3 | 2024-06-14 | A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2024-5981 | Medium | 6.3 | 2024-06-14 | A vulnerability was found in itsourcecode Online House Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file manag… |
CVE-2024-5976 | High | 7.3 | 2024-06-13 | A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been classified as critical. Affected is the function log… |
CVE-2024-29169 | Medium | 5.4 | 2024-06-13 | Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST API. A remote authenticated attacker cou… |
CVE-2024-29168 | Medium | 5.4 | 2024-06-13 | Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. A remote authenticated attacker co… |
CVE-2024-37849 | Critical | 9.8 | 2024-06-13 | A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter. |
CVE-2024-4145 | High | 7.2 | 2024-06-13 | The Search & Replace WordPress plugin before 3.2.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL… |
CVE-2024-3552 | Critical | 9.8 | 2024-06-13 | The Web Directory Free WordPress plugin before 1.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available t… |
CVE-2024-3922 | Critical | 10.0 | 2024-06-13 | The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and including, 3.10.3 due to insufficient esc… |
CVE-2024-5898 | Medium | 6.3 | 2024-06-12 | A vulnerability was found in itsourcecode Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2024-5896 | High | 7.3 | 2024-06-12 | A vulnerability, which was classified as critical, was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is the function save… |
CVE-2024-5895 | Medium | 6.3 | 2024-06-12 | A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This issue affects the f… |
CVE-2024-5894 | High | 7.3 | 2024-06-12 | A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file manage_product… |
CVE-2024-5893 | Medium | 6.3 | 2024-06-12 | A vulnerability classified as critical has been found in SourceCodester Cab Management System 1.0. This affects an unknown part of the file /cms/classes/Users… |
CVE-2024-36840 | Critical | 9.1 | 2024-06-12 | SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code and obtain sensitive information via the… |
CVE-2024-36263 | High | 8.1 | 2024-06-12 | ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Submarine Server C… |
CVE-2024-1576 | Critical | 9.8 | 2024-06-12 | SQL Injection vulnerability in MegaBIP software allows attacker to obtain site administrator privileges, including access to the administration panel and the a… |
CVE-2024-4845 | High | 8.8 | 2024-06-12 | The Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘options[list_id]’ parameter in all versions up to, and including, 5.7.22 due t… |
CVE-2024-5543 | High | 8.1 | 2024-06-12 | The Slideshow Gallery LITE plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in all versions up to, and including, 1.8.1 due… |
CVE-2024-31495 | Medium | 4.3 | 2024-06-11 | A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.0.0 through 7.0.6 and version 7.2.0 a… |
CVE-2023-23775 | Medium | 6.5 | 2024-06-11 | Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89] in FortiSOAR 7.2.0 and before 7.0.3 may al… |
CVE-2024-3549 | Critical | 9.9 | 2024-06-11 | The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to SQL Injection via the 'b2sSortPostType' parameter in all versions up… |
CVE-2024-22261 | Low | 2.7 | 2024-06-11 | SQL-Injection in Harbor allows priviledge users to leak the task IDs |
CVE-2024-37393 | High | 7.5 | 2024-06-10 | Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-supplied input. An unauthenticated remote at… |
CVE-2024-36412 | Critical | 10.0 | 2024-06-10 | SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in events response… |
CVE-2024-36411 | Critical | 9.6 | 2024-06-10 | SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for… |
CVE-2024-36410 | Critical | 9.6 | 2024-06-10 | SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for… |
CVE-2024-36409 | Critical | 9.6 | 2024-06-10 | SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for… |
CVE-2024-36408 | Critical | 9.6 | 2024-06-10 | SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for… |