CWE-89 · SQL Injection (page 93)
Page 93 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-5362 | High | 7.3 | 2024-05-26 | A vulnerability classified as critical has been found in SourceCodester Online Hospital Management System 1.0. Affected is an unknown function of the file depa… |
CVE-2024-5361 | Medium | 6.3 | 2024-05-26 | A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. This issue affects some unknown processing of the file /admin… |
CVE-2024-5360 | Medium | 6.3 | 2024-05-26 | A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin… |
CVE-2024-5359 | Medium | 6.3 | 2024-05-26 | A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been classified as critical. This affects an unknown part of the file /admin/foreigne… |
CVE-2024-5358 | Medium | 6.3 | 2024-05-26 | A vulnerability was found in PHPGurukul Zoo Management System 2.1 and classified as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2024-5357 | High | 7.3 | 2024-05-26 | A vulnerability has been found in PHPGurukul Zoo Management System 2.1 and classified as critical. Affected by this vulnerability is an unknown functionality o… |
CVE-2024-5356 | Medium | 6.3 | 2024-05-26 | A vulnerability, which was classified as critical, was found in anji-plus AJ-Report up to 1.4.1. Affected is an unknown function of the file /dataSet/testTrans… |
CVE-2024-5350 | Medium | 6.3 | 2024-05-25 | A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been classified as critical. Affected is the function pageList of the file /pageList. The… |
CVE-2024-5315 | Critical | 9.1 | 2024-05-24 | Vulnerabilities in Dolibarr ERP - CRM that affect version 9.0.1 and allow SQL injection. These vulnerabilities could allow a remote attacker to send a speciall… |
CVE-2024-5314 | Critical | 9.1 | 2024-05-24 | Vulnerabilities in Dolibarr ERP - CRM that affect version 9.0.1 and allow SQL injection. These vulnerabilities could allow a remote attacker to send a speciall… |
CVE-2024-35091 | Critical | 9.8 | 2024-05-23 | J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysTenantMapper.xml. |
CVE-2024-35090 | High | 8.2 | 2024-05-23 | J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml. |
CVE-2024-35086 | Critical | 9.8 | 2024-05-23 | J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml . |
CVE-2024-35085 | Medium | 5.4 | 2024-05-23 | J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDefinitionMapper.xml. |
CVE-2024-35084 | Critical | 9.8 | 2024-05-23 | J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml. |
CVE-2024-35083 | High | 8.8 | 2024-05-23 | J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.xml. |
CVE-2024-35082 | Medium | 6.3 | 2024-05-23 | J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml. |
CVE-2024-34936 | High | 8.6 | 2024-05-23 | A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL comm… |
CVE-2024-34935 | Critical | 9.8 | 2024-05-23 | A SQL injection vulnerability in /view/conversation_history_admin.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execut… |
CVE-2024-34934 | Critical | 9.8 | 2024-05-23 | A SQL injection vulnerability in /view/emarks_range_grade_update_form.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to ex… |
CVE-2024-34933 | Medium | 6.3 | 2024-05-23 | A SQL injection vulnerability in /model/update_grade.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary S… |
CVE-2024-34932 | Critical | 9.8 | 2024-05-23 | A SQL injection vulnerability in /model/update_exam.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQ… |
CVE-2024-34931 | Critical | 9.8 | 2024-05-23 | A SQL injection vulnerability in /model/update_subject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary… |
CVE-2024-34930 | Medium | 5.3 | 2024-05-23 | A SQL injection vulnerability in /model/all_events1.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL c… |
CVE-2024-34929 | Critical | 9.8 | 2024-05-23 | A SQL injection vulnerability in /view/find_friends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQ… |
CVE-2024-34928 | High | 7.3 | 2024-05-23 | A SQL injection vulnerability in /model/update_subject_routing.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute a… |
CVE-2024-34927 | Critical | 9.8 | 2024-05-23 | A SQL injection vulnerability in /model/update_classroom.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitra… |
CVE-2024-4779 | High | 8.8 | 2024-05-23 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to SQL Injection via the ‘data[post_ids][0]’ paramete… |
CVE-2024-5240 | Medium | 6.3 | 2024-05-23 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing o… |
CVE-2024-5239 | Medium | 6.3 | 2024-05-23 | A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This vulnerability affects unknown code… |
CVE-2024-5238 | Medium | 6.3 | 2024-05-23 | A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the… |
CVE-2024-5237 | Medium | 6.3 | 2024-05-23 | A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some… |
CVE-2024-5236 | Medium | 6.3 | 2024-05-23 | A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown fun… |
CVE-2024-5235 | Medium | 6.3 | 2024-05-23 | A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file… |
CVE-2024-5234 | Medium | 6.3 | 2024-05-23 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. This issue affects some unknown processi… |
CVE-2024-5233 | Medium | 6.3 | 2024-05-23 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. This vulnerability affects unknown co… |
CVE-2024-5232 | Medium | 6.3 | 2024-05-23 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as critical. This affects an unknown part of the… |
CVE-2024-5231 | Medium | 6.3 | 2024-05-23 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this issue is some unknown funct… |
CVE-2023-46807 | Medium | 6.7 | 2024-05-22 | An SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify data in the… |
CVE-2023-46806 | Medium | 6.7 | 2024-05-22 | An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify… |
CVE-2023-51637 | Critical | 9.8 | 2024-05-22 | Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2024-21791 | Medium | 4.7 | 2024-05-22 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability. |
CVE-2024-20360 | High | 8.8 | 2024-05-22 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to cond… |
CVE-2024-35409 | Critical | 9.8 | 2024-05-22 | WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php. |
CVE-2024-3495 | Critical | 9.8 | 2024-05-22 | The Country State City Dropdown CF7 plugin for WordPress is vulnerable to SQL Injection via the ‘cnt’ and 'sid' parameters in versions up to, and including, 2… |
CVE-2024-4443 | Critical | 9.8 | 2024-05-22 | The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘listingfields’ p… |
CVE-2024-3518 | High | 8.8 | 2024-05-22 | The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode(s) in all versions up to, and including, 3.15 due to… |
CVE-2024-35056 | Critical | 9.8 | 2024-05-21 | NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the query_packets and insert functions. |
CVE-2024-36039 | Medium | 6.3 | 2024-05-21 | PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict. |
CVE-2024-35361 | Critical | 9.8 | 2024-05-21 | MTab Bookmark v1.9.5 has an SQL injection vulnerability in /LinkStore/getIcon. An attacker can execute arbitrary SQL statements through this vulnerability with… |
CVE-2023-3942 | High | 7.5 | 2024-05-21 | An 'SQL Injection' vulnerability, due to improper neutralization of special elements used in SQL commands, exists in ZKTeco-based OEM devices. This vulnerabili… |
CVE-2023-3938 | Medium | 4.6 | 2024-05-21 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ZkTeco-based OEM devices allows an attacker to authen… |
CVE-2024-34949 | High | 8.2 | 2024-05-20 | SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList function, exploite… |
CVE-2023-49335 | High | 8.3 | 2024-05-20 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details. |
CVE-2023-49334 | High | 8.3 | 2024-05-20 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report. |
CVE-2023-49333 | High | 8.3 | 2024-05-20 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature. |
CVE-2023-49332 | High | 8.3 | 2024-05-20 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares. |
CVE-2023-49331 | High | 8.3 | 2024-05-20 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option. |
CVE-2023-49330 | High | 8.3 | 2024-05-20 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data. |
CVE-2024-5135 | High | 7.3 | 2024-05-20 | A vulnerability was found in PHPGurukul Directory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2024-5134 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in SourceCodester Electricity Consumption Monitoring Tool 1.0. It has been declared as critical. This vulnerability affects unknown c… |
CVE-2024-5122 | High | 7.3 | 2024-05-20 | A vulnerability was found in SourceCodester Event Registration System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2024-5120 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in SourceCodester Event Registration System 1.0. It has been classified as critical. Affected is an unknown function of the file /reg… |
CVE-2024-5119 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in SourceCodester Event Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file /c… |
CVE-2024-5118 | High | 7.3 | 2024-05-20 | A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2024-5117 | High | 7.3 | 2024-05-20 | A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file portal.p… |
CVE-2024-5116 | High | 7.3 | 2024-05-20 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Examination System 1.0. Affected by this issue is some unknown funct… |
CVE-2024-5115 | Medium | 6.3 | 2024-05-20 | A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown fun… |
CVE-2024-5114 | Medium | 6.3 | 2024-05-20 | A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file… |
CVE-2024-5113 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. This issue affects some unknown processi… |
CVE-2024-5112 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. This vulnerability affects unknown co… |
CVE-2024-5111 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as critical. This affects an unknown part of the… |
CVE-2024-5110 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this issue is some unknown funct… |
CVE-2024-5109 | Medium | 6.3 | 2024-05-20 | A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this vulnerability is an un… |
CVE-2024-5108 | Medium | 6.3 | 2024-05-20 | A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of t… |
CVE-2024-5107 | Medium | 6.3 | 2024-05-20 | A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0. This issue affects some unknown… |
CVE-2024-5106 | Medium | 6.3 | 2024-05-19 | A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects unknown code of the f… |
CVE-2024-5105 | Medium | 6.3 | 2024-05-19 | A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /v… |
CVE-2024-5104 | Medium | 6.3 | 2024-05-19 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown f… |
CVE-2024-5103 | Medium | 6.3 | 2024-05-19 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. Affected by this vulnerability is an… |
CVE-2024-5101 | Medium | 6.3 | 2024-05-19 | A vulnerability was found in SourceCodester Simple Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2024-5100 | Medium | 6.3 | 2024-05-19 | A vulnerability was found in SourceCodester Simple Inventory System 1.0. It has been classified as critical. This affects an unknown part of the file tableedit… |
CVE-2024-5099 | Medium | 6.3 | 2024-05-19 | A vulnerability was found in SourceCodester Simple Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2024-5098 | Medium | 5.5 | 2024-05-19 | A vulnerability has been found in SourceCodester Simple Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functiona… |
CVE-2024-5094 | High | 7.3 | 2024-05-18 | A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This issue affects some unknown processing of t… |
CVE-2024-5093 | High | 7.3 | 2024-05-18 | A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of… |
CVE-2024-5069 | Medium | 6.3 | 2024-05-17 | A vulnerability, which was classified as critical, has been found in SourceCodester Simple Online Mens Salon Management System 1.0. Affected by this issue is s… |
CVE-2024-5066 | Medium | 6.3 | 2024-05-17 | A vulnerability classified as critical was found in PHPGurukul Online Course Registration System 3.1. Affected by this vulnerability is an unknown functionalit… |
CVE-2024-5065 | High | 7.3 | 2024-05-17 | A vulnerability classified as critical has been found in PHPGurukul Online Course Registration System 3.1. Affected is an unknown function of the file /onlinec… |
CVE-2024-5064 | High | 7.3 | 2024-05-17 | A vulnerability was found in PHPGurukul Online Course Registration System 3.1. It has been rated as critical. This issue affects some unknown processing of the… |
CVE-2024-5063 | High | 7.3 | 2024-05-17 | A vulnerability was found in PHPGurukul Online Course Registration System 3.1. It has been declared as critical. This vulnerability affects unknown code of the… |
CVE-2024-5051 | Medium | 6.3 | 2024-05-17 | A vulnerability has been found in SourceCodester Gas Agency Management System 1.0 and classified as critical. This vulnerability affects unknown code of the fi… |
CVE-2024-5048 | Medium | 6.3 | 2024-05-17 | A vulnerability classified as critical was found in code-projects Budget Management 1.0. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2024-5046 | High | 7.3 | 2024-05-17 | A vulnerability was found in SourceCodester Online Examination System 1.0. It has been rated as critical. This issue affects some unknown processing of the fil… |
CVE-2024-4609 | Critical | 9.8 | 2024-05-16 | A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if… |
CVE-2024-4992 | Critical | 9.8 | 2024-05-16 | Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_kuliah/aksi_kuliah.php parameter in nim. This vulnerability could allow a remote atta… |
CVE-2024-4991 | Critical | 9.8 | 2024-05-16 | Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_pass/aksi_pass.php parameter in nama_lengkap. This vulnerability could allow a remote… |
CVE-2024-4826 | Critical | 9.8 | 2024-05-16 | SQL injection vulnerability in Simple PHP Shopping Cart affecting version 0.9. This vulnerability could allow an attacker to retrieve all the information store… |
CVE-2024-4973 | Medium | 6.3 | 2024-05-16 | A vulnerability classified as critical was found in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file /register.php. Th… |
CVE-2024-4351 | High | 8.8 | 2024-05-16 | The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on th… |