CWE-89 · SQL Injection (page 93)
Page 93 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-1928 | Medium | 4.7 | 2024-02-29 | A vulnerability, which was classified as critical, has been found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this issue is some unkn… |
CVE-2024-1927 | Medium | 6.3 | 2024-02-29 | A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functio… |
CVE-2024-1317 | High | 8.8 | 2024-02-29 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to SQL Injection via the ‘s… |
CVE-2024-1206 | High | 8.8 | 2024-02-29 | The WP Recipe Maker plugin for WordPress is vulnerable to SQL Injection via the 'recipes' parameter in all versions up to, and including, 9.1.2 due to insuffic… |
CVE-2023-7110 | High | 7.3 | 2024-02-29 | A vulnerability, which was classified as critical, has been found in code-projects Library Management System 2.0. This issue affects some unknown processing of… |
CVE-2023-7109 | High | 7.3 | 2024-02-29 | A vulnerability classified as critical was found in code-projects Library Management System 2.0. This vulnerability affects unknown code of the file /admin/log… |
CVE-2023-7107 | High | 7.3 | 2024-02-29 | A vulnerability was found in code-projects E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2023-7106 | Medium | 6.3 | 2024-02-29 | A vulnerability was found in code-projects E-Commerce Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2023-7105 | Medium | 4.7 | 2024-02-29 | A vulnerability was found in code-projects E-Commerce Website 1.0. It has been classified as critical. Affected is an unknown function of the file index_search… |
CVE-2024-25422 | Critical | 9.8 | 2024-02-28 | SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMS_Menu.php compone… |
CVE-2024-25867 | Critical | 9.1 | 2024-02-28 | A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the members… |
CVE-2024-25866 | High | 8.8 | 2024-02-28 | A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the email p… |
CVE-2024-25351 | Low | 3.8 | 2024-02-28 | SQL Injection vulnerability in /zms/admin/changeimage.php in PHPGurukul Zoo Management System 1.0 allows attackers to run arbitrary SQL commands via the editid… |
CVE-2024-22983 | High | 8.1 | 2024-02-28 | SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in t… |
CVE-2024-27515 | High | 7.2 | 2024-02-28 | Osclass 5.1.2 is vulnerable to SQL Injection. |
CVE-2024-25927 | Critical | 9.3 | 2024-02-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Joel Starnes postMash – custom post order.This issue affe… |
CVE-2024-25910 | Critical | 9.8 | 2024-02-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Skymoonlabs MoveTo.This issue affects MoveTo: from n/a th… |
CVE-2024-25902 | High | 7.6 | 2024-02-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniorange Malware Scanner.This issue affects Malware Sca… |
CVE-2024-24868 | High | 8.5 | 2024-02-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Manager.This issue affe… |
CVE-2024-24772 | Medium | 4.3 | 2024-02-28 | A guest user could exploit a chart data REST API and send arbitrary SQL statements that on error could leak information from the underlying analytics database… |
CVE-2024-1514 | Critical | 9.8 | 2024-02-28 | The WP eCommerce plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'cart_contents' parameter in all versions up to, and including, 3… |
CVE-2024-0786 | High | 8.8 | 2024-02-28 | The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to time-based SQL Inject… |
CVE-2024-24027 | High | 7.2 | 2024-02-27 | SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function DistributionMemberLogic::getFansLists. |
CVE-2024-25843 | Critical | 9.8 | 2024-02-27 | In the module "Import/Update Bulk Product from any Csv/Excel File Pro" (ba_importer) up to version 1.1.28 from Buy Addons for PrestaShop, a guest can perform S… |
CVE-2024-24323 | High | 7.2 | 2024-02-27 | SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, order… |
CVE-2024-1926 | Medium | 6.3 | 2024-02-27 | A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknow… |
CVE-2024-1924 | Medium | 6.3 | 2024-02-27 | A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /get_memb… |
CVE-2024-25400 | Critical | 9.8 | 2024-02-27 | Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request… |
CVE-2024-1923 | Medium | 6.3 | 2024-02-27 | A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as critical. Affected by this issue is the function delete_clas… |
CVE-2024-1698 | Critical | 9.8 | 2024-02-27 | The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor plugin for WordPress is vulnerable to SQL Injecti… |
CVE-2024-24100 | High | 8.3 | 2024-02-27 | Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID. |
CVE-2024-24099 | Medium | 5.4 | 2024-02-27 | Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update. |
CVE-2024-24096 | High | 7.8 | 2024-02-27 | Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN. |
CVE-2024-24095 | Critical | 9.8 | 2024-02-27 | Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection. |
CVE-2024-22917 | High | 8.6 | 2024-02-27 | SQL injection vulnerability in Dynamic Lab Management System Project in PHP v.1.0 allows a remote attacker to execute arbitrary code via a crafted script. |
CVE-2024-25247 | Critical | 9.8 | 2024-02-26 | SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude para… |
CVE-2024-25248 | Critical | 9.8 | 2024-02-26 | SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter. |
CVE-2024-24401 | Critical | 9.8 | 2024-02-26 | SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitoringwizard.php compone… |
CVE-2024-1878 | Medium | 6.3 | 2024-02-26 | A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2024-1877 | Medium | 6.3 | 2024-02-26 | A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown func… |
CVE-2024-1876 | High | 7.3 | 2024-02-26 | A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ps… |
CVE-2024-25469 | High | 7.5 | 2024-02-23 | SQL Injection vulnerability in CRMEB crmeb_java v.1.3.4 and before allows a remote attacker to obtain sensitive information via the latitude and longitude para… |
CVE-2024-24310 | High | 8.8 | 2024-02-23 | In the module "Generate barcode on invoice / delivery slip" (ecgeneratebarcode) from Ether Creation <= 1.2.0 for PrestaShop, a guest can perform SQL injection. |
CVE-2024-1833 | High | 7.3 | 2024-02-23 | A vulnerability was found in SourceCodester Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of… |
CVE-2024-1832 | High | 7.3 | 2024-02-23 | A vulnerability has been found in SourceCodester Complete File Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown f… |
CVE-2024-1831 | High | 7.3 | 2024-02-23 | A vulnerability, which was classified as critical, was found in SourceCodester Complete File Management System 1.0. Affected is an unknown function of the file… |
CVE-2024-1830 | High | 7.3 | 2024-02-23 | A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2022-43842 | High | 8.6 | 2024-02-23 | IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the att… |
CVE-2024-1829 | High | 7.3 | 2024-02-23 | A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2024-1828 | High | 7.3 | 2024-02-23 | A vulnerability was found in code-projects Library System 1.0. It has been classified as critical. Affected is an unknown function of the file Source/librarian… |
CVE-2024-1827 | High | 7.3 | 2024-02-23 | A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknown processing of the file Source/librari… |
CVE-2024-1826 | High | 7.3 | 2024-02-23 | A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file Source/libra… |
CVE-2024-1824 | High | 7.3 | 2024-02-23 | A vulnerability, which was classified as critical, has been found in CodeAstro House Rental Management System 1.0. Affected by this issue is some unknown funct… |
CVE-2024-1821 | Medium | 5.5 | 2024-02-23 | A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file po… |
CVE-2024-1820 | High | 7.3 | 2024-02-23 | A vulnerability was found in code-projects Crime Reporting System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file in… |
CVE-2024-25928 | High | 7.1 | 2024-02-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sitepact.This issue affects Sitepact: from n/a through 1… |
CVE-2024-1776 | High | 7.2 | 2024-02-23 | The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to SQL Injection via the 'form-id' parameter in all versions up to, and inclu… |
CVE-2024-1784 | Low | 3.9 | 2024-02-23 | A vulnerability classified as problematic was found in Limbas 5.2.14. Affected by this vulnerability is an unknown functionality of the file main_admin.php. Th… |
CVE-2023-52155 | High | 7.2 | 2024-02-21 | A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via… |
CVE-2023-52153 | Critical | 9.8 | 2024-02-21 | A SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to inject arbitrary S… |
CVE-2023-51828 | Critical | 9.8 | 2024-02-21 | A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attackers to execute arbitrary… |
CVE-2023-38844 | High | 7.5 | 2024-02-21 | SQL injection vulnerability in PMB v.7.4.7 and earlier allows a remote attacker to execute arbitrary code via the thesaurus parameter in export_skos.php. |
CVE-2023-37177 | Critical | 9.8 | 2024-02-21 | SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter i… |
CVE-2024-25897 | Critical | 9.8 | 2024-02-21 | ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter. |
CVE-2024-25896 | Medium | 5.3 | 2024-02-21 | ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the EID POST parameter. |
CVE-2024-25894 | Critical | 9.8 | 2024-02-21 | ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the EventCount POST parameter. |
CVE-2024-25893 | Critical | 9.1 | 2024-02-21 | ChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter. |
CVE-2024-25892 | High | 8.1 | 2024-02-21 | ChurchCRM 5.5.0 ConfirmReport.php is vulnerable to Blind SQL Injection (Time-based) via the familyId GET parameter. |
CVE-2024-25891 | High | 7.5 | 2024-02-21 | ChurchCRM 5.5.0 FRBidSheets.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter. |
CVE-2024-25288 | Medium | 4.9 | 2024-02-21 | SLIMS (Senayan Library Management Systems) 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php. |
CVE-2024-1702 | Medium | 6.3 | 2024-02-21 | A vulnerability was found in keerti1924 PHP-MYSQL-User-Login-System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2024-25428 | Medium | 6.5 | 2024-02-20 | SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter. |
CVE-2024-1597 | Critical | 10.0 | 2024-02-19 | pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is n… |
CVE-2024-1512 | Critical | 9.8 | 2024-02-17 | The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' paramete… |
CVE-2024-0610 | Critical | 9.8 | 2024-02-17 | The Piraeus Bank WooCommerce Payment Gateway plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'MerchantReference' parameter in all… |
CVE-2024-25320 | Critical | 9.8 | 2024-02-16 | Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFF_ID parameter at /affair/delete.php. |
CVE-2024-21775 | High | 8.3 | 2024-02-16 | Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature. |
CVE-2023-45860 | Medium | 6.5 | 2024-02-16 | In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequate permis… |
CVE-2023-7081 | Critical | 9.8 | 2024-02-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSTAHSİL Online Payment System allows SQL Injection. Th… |
CVE-2023-5155 | Critical | 9.8 | 2024-02-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies SoliPay Mobile App allows… |
CVE-2024-1530 | Medium | 6.3 | 2024-02-15 | A vulnerability, which was classified as critical, has been found in ECshop 4.1.8. Affected by this issue is some unknown functionality of the file /admin/view… |
CVE-2024-24256 | Medium | 5.9 | 2024-02-15 | SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive informatio… |
CVE-2024-26264 | Critical | 9.8 | 2024-02-15 | EBM Technologies RISWEB's specific query function parameter does not properly restrict user input, and this feature page is accessible without login. This allo… |
CVE-2024-26262 | High | 8.8 | 2024-02-15 | EBM Technologies Uniweb/SoliPACS WebServer's query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular us… |
CVE-2024-1523 | High | 8.8 | 2024-02-15 | EC-WEB FS-EZViewer(Web)'s query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL co… |
CVE-2024-23603 | Low | 3.8 | 2024-02-14 | An SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. Note: Software versions which have reached End of Techn… |
CVE-2024-25223 | Critical | 9.8 | 2024-02-14 | Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.php. |
CVE-2024-25222 | Critical | 9.8 | 2024-02-14 | Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php. |
CVE-2024-25220 | Critical | 9.8 | 2024-02-14 | Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/EditTask.php. |
CVE-2024-25217 | Critical | 9.8 | 2024-02-14 | Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/view_product. |
CVE-2024-25216 | Critical | 9.8 | 2024-02-14 | Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php. |
CVE-2024-25215 | Critical | 9.8 | 2024-02-14 | Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php. |
CVE-2024-25214 | Critical | 9.8 | 2024-02-14 | An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at… |
CVE-2024-25213 | High | 7.2 | 2024-02-14 | Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php. |
CVE-2024-25212 | High | 7.2 | 2024-02-14 | Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php. |
CVE-2024-25211 | Critical | 9.8 | 2024-02-14 | Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the category parameter at /endpoint/delete_category.php. |
CVE-2024-25210 | Critical | 9.8 | 2024-02-14 | Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpoint/delete_expense.php. |
CVE-2024-25209 | Critical | 9.8 | 2024-02-14 | Barangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability via the resident parameter at /endpoint/delete-resident.php. |
CVE-2023-6441 | Critical | 9.8 | 2024-02-14 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc… |
CVE-2023-48987 | High | 7.5 | 2024-02-14 | Blind SQL Injection vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to execute arbitrary code… |