CWE-89 · SQL Injection (page 92)
Page 92 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-2562 | Medium | 6.3 | 2024-03-17 | A vulnerability, which was classified as critical, was found in PandaXGO PandaX up to 20240310. This affects the function InsertRole of the file /apps/system/s… |
CVE-2024-2556 | Medium | 6.3 | 2024-03-17 | A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file a… |
CVE-2024-2555 | Medium | 6.3 | 2024-03-17 | A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionalit… |
CVE-2024-2554 | Medium | 6.3 | 2024-03-17 | A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown f… |
CVE-2024-2534 | Medium | 6.3 | 2024-03-17 | A vulnerability, which was classified as critical, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of th… |
CVE-2024-2532 | Medium | 6.3 | 2024-03-16 | A vulnerability classified as critical was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this vulnerability is an unknown f… |
CVE-2024-2528 | Medium | 6.3 | 2024-03-16 | A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been classified as critical. This affects an unknown part of t… |
CVE-2024-2527 | Medium | 6.3 | 2024-03-16 | A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as critical. Affected by this issue is some unknown fun… |
CVE-2024-2524 | Medium | 6.3 | 2024-03-16 | A vulnerability, which was classified as critical, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This issue affects some unkno… |
CVE-2024-2522 | Medium | 6.3 | 2024-03-16 | A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of the file… |
CVE-2024-2520 | Medium | 6.3 | 2024-03-16 | A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been declared as critical. Affected by this vulnerability is a… |
CVE-2024-2517 | Medium | 6.3 | 2024-03-16 | A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as critical. This vulnerability affects unknown co… |
CVE-2024-2516 | Medium | 6.3 | 2024-03-16 | A vulnerability, which was classified as critical, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of th… |
CVE-2024-2514 | High | 7.3 | 2024-03-15 | A vulnerability classified as critical was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this vulnerability is an unknown f… |
CVE-2024-1795 | High | 8.8 | 2024-03-15 | The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to SQL Injection via the 'name' parameter in the woof shortcode in… |
CVE-2024-2480 | Medium | 6.3 | 2024-03-15 | A vulnerability classified as critical was found in MHA Sistemas arMHAzena 9.6.0.0. This vulnerability affects unknown code of the component Executa Page. The… |
CVE-2024-2478 | Medium | 6.3 | 2024-03-15 | A vulnerability was found in BradWenqiang HR 2.0. It has been rated as critical. Affected by this issue is the function selectAll of the file /bishe/register o… |
CVE-2024-25227 | Critical | 9.8 | 2024-03-15 | SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), escalate privileges, an… |
CVE-2024-28323 | Medium | 6.5 | 2024-03-14 | The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a potential security vulnerability related t… |
CVE-2024-28388 | Critical | 9.8 | 2024-03-14 | SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain… |
CVE-2024-25250 | Critical | 9.8 | 2024-03-13 | SQL Injection vulnerability in code-projects Agro-School Management System 1.0 allows attackers to run arbitrary code via the Login page. |
CVE-2024-24105 | High | 7.8 | 2024-03-13 | SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary code via adminFormvalidation.php. |
CVE-2023-41504 | High | 8.8 | 2024-03-13 | SQL Injection vulnerability in Student Enrollment In PHP 1.0 allows attackers to run arbitrary code via the Student Search function. |
CVE-2024-2418 | Medium | 6.3 | 2024-03-13 | A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown func… |
CVE-2024-1793 | High | 7.2 | 2024-03-13 | The AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth plugin for WordPress is vulnerable to SQL Inject… |
CVE-2024-1751 | High | 8.8 | 2024-03-13 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection via the question_id parameter in all versio… |
CVE-2024-1203 | High | 8.8 | 2024-03-13 | The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to SQL Injection via the… |
CVE-2024-1071 | Critical | 9.8 | 2024-03-13 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to SQL In… |
CVE-2023-5663 | High | 8.8 | 2024-03-13 | The News Announcement Scroll plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0.0 due to insu… |
CVE-2024-24101 | Critical | 9.8 | 2024-03-12 | Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update. |
CVE-2024-24093 | Critical | 9.8 | 2024-03-12 | SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information. |
CVE-2024-24092 | High | 7.8 | 2024-03-12 | SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via login.php. |
CVE-2024-1301 | Critical | 9.8 | 2024-03-12 | SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier. A remote attacker could send a specially crafted SQL query to the se… |
CVE-2023-48788 | Critical | 9.8 | 2024-03-12 | A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7… |
CVE-2024-2393 | Medium | 6.3 | 2024-03-12 | A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functi… |
CVE-2024-25325 | High | 7.1 | 2024-03-12 | SQL injection vulnerability in Employee Management System v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to the txtemail p… |
CVE-2024-1068 | High | 7.2 | 2024-03-11 | The 404 Solution WordPress plugin before 2.35.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injectio… |
CVE-2024-28816 | High | 7.1 | 2024-03-11 | Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php. |
CVE-2024-2351 | Medium | 6.3 | 2024-03-09 | A vulnerability classified as critical was found in CodeAstro Ecommerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file action… |
CVE-2024-2333 | Medium | 6.3 | 2024-03-09 | A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unknown function of the file /add_members.p… |
CVE-2024-2332 | Medium | 6.3 | 2024-03-09 | A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. This issue affects some unknown processing of th… |
CVE-2024-2330 | Medium | 6.3 | 2024-03-09 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /p… |
CVE-2024-2329 | Medium | 6.3 | 2024-03-09 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2024-2338 | High | 8.0 | 2024-03-08 | PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled… |
CVE-2024-21901 | Medium | 4.7 | 2024-03-08 | A SQL injection vulnerability has been reported to affect myQNAPcloud. If exploited, the vulnerability could allow authenticated administrators to inject malic… |
CVE-2024-2283 | Medium | 6.3 | 2024-03-08 | A vulnerability classified as critical has been found in boyiddha Automated-Mess-Management-System 1.0. Affected is an unknown function of the file /member/vie… |
CVE-2024-2282 | High | 7.3 | 2024-03-08 | A vulnerability was found in boyiddha Automated-Mess-Management-System 1.0. It has been rated as critical. This issue affects some unknown processing of the fi… |
CVE-2024-25849 | Critical | 9.8 | 2024-03-08 | In the module "Make an offer" (makeanoffer) <= 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffe… |
CVE-2024-25848 | Medium | 5.9 | 2024-03-08 | In the module "Ever Ultimate SEO" (everpsseo) <= 8.1.2 from Team Ever for PrestaShop, a guest can perform SQL injection in affected versions. |
CVE-2024-25845 | Critical | 9.8 | 2024-03-08 | In the module "CD Custom Fields 4 Orders" (cdcustomfields4orders) <= 1.0.0 from Cleanpresta.com for PrestaShop, a guest can perform SQL injection in affected v… |
CVE-2024-2272 | Medium | 6.3 | 2024-03-08 | A vulnerability classified as critical was found in keerti1924 Online-Book-Store-Website 1.0. This vulnerability affects unknown code of the file /home.php of… |
CVE-2024-2271 | Medium | 6.3 | 2024-03-08 | A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the co… |
CVE-2024-2269 | Medium | 6.3 | 2024-03-07 | A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functiona… |
CVE-2024-2264 | High | 7.3 | 2024-03-07 | A vulnerability, which was classified as critical, has been found in keerti1924 PHP-MYSQL-User-Login-System 1.0. Affected by this issue is some unknown functio… |
CVE-2023-41015 | Medium | 5.5 | 2024-03-07 | code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via /Employer/DeleteJob.php?JobId=1. |
CVE-2023-41014 | Critical | 9.8 | 2024-03-07 | code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer." |
CVE-2023-33676 | High | 8.4 | 2024-03-07 | Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=*" which can be escalated… |
CVE-2022-46499 | High | 8.8 | 2024-03-07 | Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_admin_view_single_patient.php. |
CVE-2022-46498 | Low | 2.7 | 2024-03-07 | Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the doc_number parameter at his_admin_view_single_employee.php. |
CVE-2022-46497 | High | 8.1 | 2024-03-07 | Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_doc_view_single_patien.php. |
CVE-2024-28094 | High | 8.8 | 2024-03-07 | Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the authenticated attackers to read, modify… |
CVE-2024-24375 | High | 7.5 | 2024-03-07 | SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter. |
CVE-2023-49989 | Critical | 9.8 | 2024-03-07 | Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at update.php. |
CVE-2023-49988 | High | 7.5 | 2024-03-07 | Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the npss parameter at rooms.php. |
CVE-2024-27304 | Critical | 9.8 | 2024-03-06 | pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integ… |
CVE-2024-27289 | High | 8.1 | 2024-03-06 | pgx is a PostgreSQL driver and toolkit for Go. Prior to version 4.18.2, SQL injection can occur when all of the following conditions are met: the non-default s… |
CVE-2023-33677 | High | 7.5 | 2024-03-06 | Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=*". |
CVE-2024-24098 | High | 7.8 | 2024-03-05 | Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed. |
CVE-2024-27718 | High | 7.8 | 2024-03-05 | SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privi… |
CVE-2023-49970 | Critical | 9.8 | 2024-03-05 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.php?action=save_ticket. |
CVE-2023-49969 | Medium | 4.3 | 2024-03-05 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/index.php?page=edit_customer. |
CVE-2023-49968 | High | 7.3 | 2024-03-05 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/manage_department.php. |
CVE-2023-49548 | High | 8.8 | 2024-03-05 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customer_support/ajax.php?action=save_user. |
CVE-2023-49547 | Critical | 9.8 | 2024-03-05 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customer_support/ajax.php?action=login. |
CVE-2023-49546 | High | 8.8 | 2024-03-05 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer_support/ajax.php. |
CVE-2024-2168 | Medium | 4.7 | 2024-03-04 | A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function o… |
CVE-2024-27889 | High | 8.8 | 2024-03-04 | Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW). A user with advance… |
CVE-2024-2156 | Medium | 6.3 | 2024-03-04 | A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. Affected is an unknown function of the file adm… |
CVE-2024-2154 | Medium | 6.3 | 2024-03-04 | A vulnerability has been found in SourceCodester Online Mobile Management Store 1.0 and classified as critical. This vulnerability affects unknown code of the… |
CVE-2024-2153 | Medium | 6.3 | 2024-03-04 | A vulnerability, which was classified as critical, was found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /ad… |
CVE-2024-2152 | Medium | 4.7 | 2024-03-04 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Mobile Management Store 1.0. Affected by this issue is some unknown… |
CVE-2024-2149 | Medium | 4.7 | 2024-03-03 | A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. This vulnerability affects unknown code of the file settings.ph… |
CVE-2024-2147 | High | 7.3 | 2024-03-03 | A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. Affected by this issue is some unknown functiona… |
CVE-2024-27746 | Critical | 9.8 | 2024-03-01 | SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address par… |
CVE-2023-49544 | Medium | 4.9 | 2024-03-01 | A local file inclusion (LFI) in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the p… |
CVE-2024-2077 | Medium | 6.3 | 2024-03-01 | A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file index.php. T… |
CVE-2024-2074 | Medium | 6.3 | 2024-03-01 | A vulnerability was found in Mini-Tmall up to 20231017 and classified as critical. This issue affects some unknown processing of the file ?r=tmall/admin/user/1… |
CVE-2024-27298 | Critical | 10.0 | 2024-03-01 | parse-server is a Parse Server for Node.js / Express. This vulnerability allows SQL injection when Parse Server is configured to use the PostgreSQL database. T… |
CVE-2024-2073 | Medium | 6.3 | 2024-03-01 | A vulnerability has been found in SourceCodester Block Inserter for Dynamic Content 1.0 and classified as critical. This vulnerability affects unknown code of… |
CVE-2024-2069 | Medium | 6.3 | 2024-03-01 | A vulnerability classified as critical has been found in SourceCodester FAQ Management System 1.0. Affected is an unknown function of the file /endpoint/delete… |
CVE-2024-2067 | Medium | 6.3 | 2024-03-01 | A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the fil… |
CVE-2024-2062 | Medium | 4.7 | 2024-03-01 | A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. This issue affects some unknown proces… |
CVE-2024-2061 | Medium | 4.7 | 2024-03-01 | A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. This vulnerability affects unknown code of the file /ad… |
CVE-2024-2060 | Medium | 4.7 | 2024-03-01 | A vulnerability classified as critical has been found in SourceCodester Petrol Pump Management Software 1.0. This affects an unknown part of the file /admin/ap… |
CVE-2024-2022 | Medium | 6.3 | 2024-03-01 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown… |
CVE-2024-2021 | Medium | 6.3 | 2024-03-01 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. Affected is an unknown function of the file… |
CVE-2024-1982 | Medium | 6.5 | 2024-02-29 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the get_restore_progres… |
CVE-2024-1981 | Critical | 9.8 | 2024-02-29 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to SQL Injection via the 'table_prefix' parameter in version 0.9.68 due to insuffic… |
CVE-2024-25833 | Critical | 9.8 | 2024-02-29 | F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated malicious actor to execute arbitrary SQL queries in… |
CVE-2024-1971 | High | 7.3 | 2024-02-29 | A vulnerability has been found in Surya2Developer Online Shopping System 1.0 and classified as critical. Affected by this vulnerability is an unknown functiona… |