CWE-89 · SQL Injection (page 92)
Page 92 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-35305 | Critical | 9.8 | 2024-06-10 | Unauth Time-Based SQL Injection in API allows to exploit HTTP request Authorization header. This issue affects Pandora FMS: from 700 through <777. |
CVE-2024-5775 | Medium | 6.3 | 2024-06-09 | A vulnerability was found in SourceCodester Vehicle Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of t… |
CVE-2024-5774 | High | 7.3 | 2024-06-09 | A vulnerability has been found in SourceCodester Stock Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functiona… |
CVE-2024-5773 | Medium | 6.3 | 2024-06-09 | A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file… |
CVE-2024-5772 | Medium | 6.3 | 2024-06-09 | A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3. This issue affects some unknown process… |
CVE-2024-5771 | Medium | 6.3 | 2024-06-08 | A vulnerability classified as critical was found in LabVantage LIMS 2017. This vulnerability affects unknown code of the file /labvantage/rc?command=page&page=… |
CVE-2024-35678 | High | 8.5 | 2024-06-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft.This issue… |
CVE-2024-35750 | High | 8.5 | 2024-06-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdevart Responsive Image Gallery, Gallery Album.This iss… |
CVE-2024-35736 | High | 8.5 | 2024-06-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Visualizer.This issue affects Visualizer: from… |
CVE-2024-30163 | Critical | 9.8 | 2024-06-07 | Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\_store::_categoryVi… |
CVE-2024-36673 | Critical | 9.8 | 2024-06-07 | Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php. This vulnerability stems from inadequate validation o… |
CVE-2024-5733 | High | 7.3 | 2024-06-07 | A vulnerability was found in itsourcecode Online Discussion Forum 1.0. It has been rated as critical. This issue affects some unknown processing of the file re… |
CVE-2024-3592 | Critical | 9.9 | 2024-06-07 | The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'question_id' paramete… |
CVE-2024-4902 | High | 7.2 | 2024-06-07 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection via the ‘course_id’ parameter in all versio… |
CVE-2024-36082 | Medium | 6.5 | 2024-06-07 | SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated attacker with an administrative privile… |
CVE-2024-5225 | High | 7.2 | 2024-06-06 | An SQL Injection vulnerability exists in the berriai/litellm repository, specifically within the `/global/spend/logs` endpoint. The vulnerability arises due to… |
CVE-2024-4890 | Medium | 4.9 | 2024-06-06 | A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the '/team/update' process. The vulnerability arises due to… |
CVE-2024-36779 | Critical | 9.8 | 2024-06-06 | Sourcecodester Stock Management System v1.0 is vulnerable to SQL Injection via editCategories.php. |
CVE-2024-5329 | High | 8.8 | 2024-06-06 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to blind SQL Injection via the ‘data[addonID]’ parame… |
CVE-2024-36393 | Critical | 9.9 | 2024-06-06 | SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CVE-2024-5653 | High | 7.3 | 2024-06-05 | A vulnerability, which was classified as critical, has been found in Chanjet Smooth T+system 3.5. This issue affects some unknown processing of the file /tplus… |
CVE-2024-36837 | High | 7.5 | 2024-06-05 | SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain sensitive information via the getProductList function in the ProductController… |
CVE-2024-4743 | High | 8.8 | 2024-06-05 | The LifterLMS – WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to SQL Injection via the orderBy attribute of the lifterlms_favorites sho… |
CVE-2024-4295 | Critical | 9.8 | 2024-06-05 | The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘hash’ parameter in all versions up to, and including, 5.7… |
CVE-2024-5636 | Medium | 6.3 | 2024-06-05 | A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionalit… |
CVE-2024-5635 | Medium | 6.3 | 2024-06-04 | A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown fun… |
CVE-2024-28996 | High | 7.5 | 2024-06-04 | The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability. Attack complexity is high for this vulnerability. |
CVE-2024-36801 | Medium | 5.9 | 2024-06-04 | A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php. |
CVE-2024-36800 | High | 7.5 | 2024-06-04 | A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php. |
CVE-2024-34987 | Critical | 9.1 | 2024-06-03 | A SQL Injection vulnerability exists in the `ofrs/admin/index.php` script of PHPGurukul Online Fire Reporting System 1.2. The vulnerability allows attackers to… |
CVE-2024-35630 | High | 7.6 | 2024-06-03 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LJ Apps WP TripAdvisor Review Slider allows Blind SQL Inj… |
CVE-2024-5311 | Critical | 9.8 | 2024-06-03 | DigiWin EasyFlow .NET lacks validation for certain input parameters. An unauthenticated remote attacker can inject arbitrary SQL commands to read, modify, and… |
CVE-2024-5590 | Medium | 6.3 | 2024-06-03 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. This vulnerability affects unknown code of th… |
CVE-2024-5589 | Medium | 6.3 | 2024-06-03 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /a… |
CVE-2024-5588 | Medium | 6.3 | 2024-06-02 | A vulnerability was found in itsourcecode Learning Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functi… |
CVE-2024-3820 | Critical | 10.0 | 2024-06-01 | The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to SQL Injection via the 'id_key' parameter of… |
CVE-2024-3200 | Critical | 9.9 | 2024-06-01 | The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'slug' attribute of the 'wpforo' shortcode in all versions up to, and including, 2… |
CVE-2024-29846 | High | 8.0 | 2024-05-31 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same network to execute… |
CVE-2024-29830 | High | 8.0 | 2024-05-31 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same network to execute… |
CVE-2024-29829 | High | 8.0 | 2024-05-31 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same network to execute… |
CVE-2024-29828 | High | 8.0 | 2024-05-31 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same network to execute… |
CVE-2024-29827 | High | 8.8 | 2024-05-31 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execut… |
CVE-2024-29826 | High | 8.8 | 2024-05-31 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execut… |
CVE-2024-29825 | High | 8.8 | 2024-05-31 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execut… |
CVE-2024-29824 | High | 8.8 | 2024-05-31 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execut… |
CVE-2024-29823 | High | 8.8 | 2024-05-31 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execut… |
CVE-2024-29822 | High | 8.8 | 2024-05-31 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execut… |
CVE-2024-22059 | High | 8.8 | 2024-05-31 | A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user to read/modify/delete information in the underlyin… |
CVE-2024-5523 | High | 8.8 | 2024-05-31 | SQL injection vulnerability in Astrotalks affecting version 10/03/2023. This vulnerability could allow an authenticated local user to send a specially crafted… |
CVE-2024-35469 | Critical | 9.8 | 2024-05-30 | A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the p… |
CVE-2024-35468 | Medium | 5.4 | 2024-05-30 | A SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via t… |
CVE-2024-35359 | Critical | 9.8 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Maste… |
CVE-2024-35350 | Critical | 9.8 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=b… |
CVE-2024-35349 | Critical | 9.8 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/categor… |
CVE-2024-5519 | High | 7.3 | 2024-05-30 | A vulnerability classified as critical was found in ItsourceCode Learning Management System Project In PHP 1.0. This vulnerability affects unknown code of the… |
CVE-2024-35358 | Medium | 6.5 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Maste… |
CVE-2024-35357 | Medium | 5.3 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Maste… |
CVE-2024-35356 | Medium | 6.3 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Maste… |
CVE-2024-35355 | Critical | 9.8 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Maste… |
CVE-2024-35354 | Critical | 9.8 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Maste… |
CVE-2024-5517 | High | 7.3 | 2024-05-30 | A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functi… |
CVE-2024-5516 | Medium | 6.3 | 2024-05-30 | A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unkno… |
CVE-2024-5515 | Medium | 6.3 | 2024-05-30 | A vulnerability was found in SourceCodester Stock Management System 1.0. It has been classified as critical. Affected is an unknown function of the file create… |
CVE-2024-1100 | Critical | 9.8 | 2024-05-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Vadi Corporate Information Systems DIGIKENT GIS allows SQ… |
CVE-2024-5207 | High | 7.2 | 2024-05-30 | The POST SMTP – The #1 WordPress SMTP Plugin with Advanced Email Logging and Delivery Failure Notifications plugin for WordPress is vulnerable to time-based SQ… |
CVE-2024-35548 | Medium | 5.4 | 2024-05-28 | A SQL injection vulnerability in Mybatis plus versions below 3.5.6 allows remote attackers to obtain database information via a Boolean blind injection. NOTE… |
CVE-2024-35511 | Medium | 4.7 | 2024-05-28 | phpgurukul Men Salon Management System v2.0 is vulnerable to SQL Injection via the "username" parameter of /msms/admin/index.php. |
CVE-2024-33450 | High | 7.5 | 2024-05-28 | SQL Injection in Finereport v.8.0 allows a remote attacker to obtain sensitive information |
CVE-2024-33402 | High | 8.1 | 2024-05-28 | A SQL injection vulnerability in /model/approve_petty_cash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrar… |
CVE-2024-35563 | Critical | 9.8 | 2024-05-28 | CDG-Server-V5.6.2.126.139 and earlier was discovered to contain a SQL injection vulnerability via the permissionId parameter in CDGTempPermissions. |
CVE-2024-33808 | Critical | 9.8 | 2024-05-28 | A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary… |
CVE-2024-33807 | Medium | 5.4 | 2024-05-28 | A SQL injection vulnerability in /model/get_teacher_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute ar… |
CVE-2024-33806 | Critical | 9.8 | 2024-05-28 | A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL… |
CVE-2024-33805 | Critical | 9.8 | 2024-05-28 | A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQ… |
CVE-2024-33804 | Medium | 6.3 | 2024-05-28 | A SQL injection vulnerability in /model/get_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQ… |
CVE-2024-33803 | Medium | 5.4 | 2024-05-28 | A SQL injection vulnerability in /model/get_exam.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL c… |
CVE-2024-33802 | Medium | 6.5 | 2024-05-28 | A SQL injection vulnerability in /model/get_student_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbi… |
CVE-2024-33801 | Critical | 9.8 | 2024-05-28 | A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbi… |
CVE-2024-33800 | Critical | 9.8 | 2024-05-28 | A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary S… |
CVE-2024-33799 | Critical | 9.8 | 2024-05-28 | A SQL injection vulnerability in /model/get_teacher.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQ… |
CVE-2024-36428 | High | 8.1 | 2024-05-27 | OrangeHRM 3.3.3 allows admin/viewProjects sortOrder SQL injection. |
CVE-2024-35182 | Medium | 5.9 | 2024-05-27 | Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vul… |
CVE-2024-35181 | Medium | 5.9 | 2024-05-27 | Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vul… |
CVE-2024-0851 | | 2024-05-27 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Grup Arge Energy and Control Systems Smartpower allows SQ… | |
CVE-2024-4533 | Medium | 6.5 | 2024-05-27 | The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admin users to… |
CVE-2024-5397 | Medium | 6.3 | 2024-05-27 | A vulnerability classified as critical was found in itsourcecode Online Student Enrollment System 1.0. Affected by this vulnerability is an unknown functionali… |
CVE-2024-5396 | Medium | 6.3 | 2024-05-27 | A vulnerability classified as critical has been found in itsourcecode Online Student Enrollment System 1.0. Affected is an unknown function of the file newfacu… |
CVE-2024-5395 | Medium | 6.3 | 2024-05-27 | A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of th… |
CVE-2024-5394 | Medium | 6.3 | 2024-05-27 | A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been declared as critical. This vulnerability affects unknown code of th… |
CVE-2024-5393 | Medium | 6.3 | 2024-05-27 | A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been classified as critical. This affects an unknown part of the file li… |
CVE-2024-5392 | Medium | 6.3 | 2024-05-27 | A vulnerability was found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2024-5391 | Medium | 6.3 | 2024-05-27 | A vulnerability has been found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown fu… |
CVE-2024-5390 | Medium | 6.3 | 2024-05-27 | A vulnerability, which was classified as critical, was found in itsourcecode Online Student Enrollment System 1.0. Affected is an unknown function of the file… |
CVE-2024-5384 | High | 7.3 | 2024-05-27 | A vulnerability classified as critical was found in SourceCodester Facebook News Feed Like 1.0. This vulnerability affects unknown code of the file index.php… |
CVE-2024-5381 | Medium | 6.3 | 2024-05-26 | A vulnerability classified as critical was found in itsourcecode Student Information Management System 1.0. Affected by this vulnerability is an unknown functi… |
CVE-2024-5378 | Medium | 6.3 | 2024-05-26 | A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been declared as critical. This vulnerability a… |
CVE-2024-5366 | Medium | 6.3 | 2024-05-26 | A vulnerability has been found in SourceCodester Best House Rental Management System up to 1.0 and classified as critical. This vulnerability affects unknown c… |
CVE-2024-5365 | Medium | 6.3 | 2024-05-26 | A vulnerability, which was classified as critical, was found in SourceCodester Best House Rental Management System up to 1.0. This affects an unknown part of t… |
CVE-2024-5364 | Medium | 6.3 | 2024-05-26 | A vulnerability, which was classified as critical, has been found in SourceCodester Best House Rental Management System up to 1.0. Affected by this issue is so… |
CVE-2024-5363 | Medium | 6.3 | 2024-05-26 | A vulnerability classified as critical was found in SourceCodester Best House Rental Management System up to 1.0. Affected by this vulnerability is an unknown… |