CWE-89 · SQL Injection (page 94)
Page 94 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-4972 | Medium | 6.3 | 2024-05-16 | A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipul… |
CVE-2024-4967 | Medium | 6.3 | 2024-05-16 | A vulnerability was found in SourceCodester Interactive Map with Marker 1.0. It has been declared as critical. Affected by this vulnerability is an unknown fun… |
CVE-2024-4318 | High | 8.8 | 2024-05-16 | The Tutor LMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘question_id’ parameter in versions up to, and including, 2.7.0 due to ins… |
CVE-2024-4945 | Medium | 4.3 | 2024-05-16 | A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been classified as problematic. Affected is an unknown function of the f… |
CVE-2024-4933 | Medium | 6.3 | 2024-05-16 | A vulnerability has been found in SourceCodester Simple Online Bidding System 1.0 and classified as critical. Affected by this vulnerability is an unknown func… |
CVE-2024-4932 | Medium | 6.3 | 2024-05-16 | A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Bidding System 1.0. Affected is an unknown function of the file /s… |
CVE-2024-4931 | Medium | 6.3 | 2024-05-16 | A vulnerability, which was classified as critical, has been found in SourceCodester Simple Online Bidding System 1.0. This issue affects some unknown processin… |
CVE-2024-4930 | Medium | 6.3 | 2024-05-16 | A vulnerability classified as critical was found in SourceCodester Simple Online Bidding System 1.0. This vulnerability affects unknown code of the file /simpl… |
CVE-2024-4928 | Medium | 6.3 | 2024-05-16 | A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been rated as critical. Affected by this issue is some unknown functionali… |
CVE-2024-4926 | Medium | 6.3 | 2024-05-16 | A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been classified as critical. Affected is an unk… |
CVE-2024-4925 | Medium | 6.3 | 2024-05-16 | A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0 and classified as critical. This issue affects some unk… |
CVE-2024-4919 | Medium | 6.3 | 2024-05-16 | A vulnerability was found in Campcodes Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /ad… |
CVE-2024-4918 | Medium | 6.3 | 2024-05-15 | A vulnerability was found in Campcodes Online Examination System 1.0. It has been classified as critical. This affects an unknown part of the file updateQuesti… |
CVE-2024-4917 | Medium | 6.3 | 2024-05-15 | A vulnerability was found in Campcodes Online Examination System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fi… |
CVE-2024-4916 | Medium | 6.3 | 2024-05-15 | A vulnerability has been found in Campcodes Online Examination System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionalit… |
CVE-2024-4915 | Medium | 6.3 | 2024-05-15 | A vulnerability, which was classified as critical, was found in Campcodes Online Examination System 1.0. Affected is an unknown function of the file result.php… |
CVE-2024-4914 | Medium | 6.3 | 2024-05-15 | A vulnerability, which was classified as critical, has been found in Campcodes Online Examination System 1.0. This issue affects some unknown processing of the… |
CVE-2024-4913 | Medium | 6.3 | 2024-05-15 | A vulnerability classified as critical was found in Campcodes Online Examination System 1.0. This vulnerability affects unknown code of the file exam.php. The… |
CVE-2024-4912 | Medium | 6.3 | 2024-05-15 | A vulnerability classified as critical has been found in Campcodes Online Examination System 1.0. This affects an unknown part of the file addExamExe.php. The… |
CVE-2024-4911 | Medium | 6.3 | 2024-05-15 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown f… |
CVE-2024-4910 | Medium | 6.3 | 2024-05-15 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. Affected by this vulnerability is an… |
CVE-2024-31856 | High | 8.8 | 2024-05-15 | An attacker with certain MQTT permissions can create malicious messages to all CyberPower PowerPanel devices. This could result in an attacker injecting SQL… |
CVE-2024-4909 | Medium | 6.3 | 2024-05-15 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as critical. Affected is an unknown function of… |
CVE-2024-4908 | Medium | 6.3 | 2024-05-15 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing o… |
CVE-2024-4907 | Medium | 6.3 | 2024-05-15 | A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This vulnerability affects unknown code… |
CVE-2024-4906 | Medium | 6.3 | 2024-05-15 | A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the… |
CVE-2024-4905 | Medium | 6.3 | 2024-05-15 | A vulnerability classified as critical has been found in Kashipara College Management System 1.0. Affected is an unknown function of the file view_students_eac… |
CVE-2024-4903 | Medium | 6.3 | 2024-05-15 | A vulnerability was found in Tongda OA 2017. It has been declared as critical. This vulnerability affects unknown code of the file /general/meeting/manage/dele… |
CVE-2024-34955 | Critical | 9.8 | 2024-05-15 | Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter. |
CVE-2024-4893 | Critical | 9.8 | 2024-05-15 | DigiWin EasyFlow .NET lacks validation for certain input parameters, allowing remote attackers to inject arbitrary SQL commands. This vulnerability enables una… |
CVE-2024-32888 | Critical | 10.0 | 2024-05-15 | The Amazon JDBC Driver for Redshift is a Type 4 JDBC driver that provides database connectivity through the standard JDBC application program interfaces (APIs)… |
CVE-2024-4847 | High | 8.8 | 2024-05-15 | The Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin for WordPress is vulnerable to generic SQL Injection via the ‘last_pos… |
CVE-2022-28132 | High | 7.2 | 2024-05-14 | The T-Soft E-Commerce 4 web application is susceptible to SQL injection (SQLi) attacks when authenticated as an admin or privileged user. This vulnerability al… |
CVE-2024-33485 | Critical | 9.8 | 2024-05-14 | SQL Injection vulnerability in CASAP Automated Enrollment System using PHP/MySQLi with Source Code V1.0 allows a remote attacker to obtain sensitive informatio… |
CVE-2023-24204 | Medium | 5.4 | 2024-05-14 | SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitrary code via the name parame… |
CVE-2024-34256 | Critical | 9.8 | 2024-05-14 | OFCMS V1.1.2 is vulnerable to SQL Injection via the new table function. |
CVE-2024-33009 | Medium | 4.2 | 2024-05-14 | SAP Global Label Management is vulnerable to SQL injection. On exploitation the attacker can use specially crafted inputs to modify database commands resulting… |
CVE-2024-27941 | High | 8.8 | 2024-05-14 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected client systems do not properly sanitize input data before sending… |
CVE-2024-27940 | High | 8.8 | 2024-05-14 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any authenticated user to send arbitrary SQL comman… |
CVE-2024-4824 | Critical | 9.8 | 2024-05-14 | Vulnerability in School ERP Pro+Responsive 1.0 that allows SQL injection through the '/SchoolERP/office_admin/' index in the parameters groups_id, examname, cl… |
CVE-2024-4808 | Medium | 6.3 | 2024-05-14 | A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0. Affected is an unknown function of the file delete_fac… |
CVE-2024-4807 | Medium | 6.3 | 2024-05-14 | A vulnerability, which was classified as critical, has been found in Kashipara College Management System 1.0. This issue affects some unknown processing of the… |
CVE-2024-4806 | Medium | 6.3 | 2024-05-14 | A vulnerability classified as critical was found in Kashipara College Management System 1.0. This vulnerability affects unknown code of the file each_extracurr… |
CVE-2024-4805 | Medium | 6.3 | 2024-05-14 | A vulnerability classified as critical has been found in Kashipara College Management System 1.0. This affects an unknown part of the file edit_faculty.php. Th… |
CVE-2024-4804 | Medium | 6.3 | 2024-05-14 | A vulnerability was found in Kashipara College Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of th… |
CVE-2024-4803 | Medium | 6.3 | 2024-05-14 | A vulnerability was found in Kashipara College Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functional… |
CVE-2024-4802 | Medium | 6.3 | 2024-05-14 | A vulnerability was found in Kashipara College Management System 1.0. It has been classified as critical. Affected is an unknown function of the file submit_ex… |
CVE-2024-4801 | Medium | 6.3 | 2024-05-14 | A vulnerability was found in Kashipara College Management System 1.0 and classified as critical. This issue affects some unknown processing of the file submit_… |
CVE-2024-4800 | Medium | 6.3 | 2024-05-14 | A vulnerability has been found in Kashipara College Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file submi… |
CVE-2024-4799 | Medium | 6.3 | 2024-05-14 | A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0. This affects an unknown part of the file view_each_fac… |
CVE-2024-4798 | Medium | 6.3 | 2024-05-14 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknow… |
CVE-2024-4796 | Medium | 6.3 | 2024-05-14 | A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as critical. This affects an unknown part of the file /mana… |
CVE-2024-4795 | Medium | 6.3 | 2024-05-14 | A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of… |
CVE-2024-4794 | Medium | 6.3 | 2024-05-14 | A vulnerability has been found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown funct… |
CVE-2024-4793 | Medium | 6.3 | 2024-05-14 | A vulnerability, which was classified as critical, was found in Campcodes Online Laundry Management System 1.0. Affected is an unknown function of the file /ma… |
CVE-2024-4792 | Medium | 6.3 | 2024-05-14 | A vulnerability, which was classified as critical, has been found in Campcodes Online Laundry Management System 1.0. This issue affects some unknown processing… |
CVE-2024-4434 | Critical | 9.8 | 2024-05-14 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘term_id’ parameter in versions up to, and includi… |
CVE-2024-4423 | High | 7.2 | 2024-05-14 | The access control in CemiPark software does not properly validate user-entered data, which allows the authentication bypass. An attacker who has network acces… |
CVE-2024-3055 | High | 8.8 | 2024-05-14 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in… |
CVE-2024-34310 | High | 8.8 | 2024-05-14 | Jin Fang Times Content Management System v3.2.3 was discovered to contain a SQL injection vulnerability via the id parameter. |
CVE-2024-34226 | Critical | 9.4 | 2024-05-14 | SQL injection vulnerability in /php-sqlite-vms/?page=manage_visitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary S… |
CVE-2024-34222 | Medium | 5.9 | 2024-05-14 | Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter. |
CVE-2024-34220 | High | 7.5 | 2024-05-14 | Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter. |
CVE-2024-32739 | High | 7.5 | 2024-05-14 | A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via… |
CVE-2024-32738 | High | 7.5 | 2024-05-14 | A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via… |
CVE-2024-32737 | High | 7.5 | 2024-05-14 | A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via… |
CVE-2024-32736 | High | 7.5 | 2024-05-14 | A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via… |
CVE-2024-32655 | High | 8.1 | 2024-05-14 | Npgsql is the .NET data provider for PostgreSQL. The `WriteBind()` method in `src/Npgsql/Internal/NpgsqlConnector.FrontendMessages.cs` uses `int` variables to… |
CVE-2024-31460 | Medium | 6.5 | 2024-05-14 | Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in `automation_tree_rules.php` is not… |
CVE-2024-31458 | Medium | 4.6 | 2024-05-14 | Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in `form_save()` function in `graph_t… |
CVE-2024-31445 | High | 8.8 | 2024-05-14 | Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, a SQL injection vulnerability in `automation_get_new_graphs_s… |
CVE-2024-30801 | Medium | 5.5 | 2024-05-14 | SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execute arbitrary code via a crafted payload… |
CVE-2024-28279 | High | 7.3 | 2024-05-14 | Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=. |
CVE-2023-50718 | Medium | 6.5 | 2024-05-14 | NocoDB is software for building databases as spreadsheets. Prior to version 0.202.10, an authenticated attacker with create access could conduct a SQL Injectio… |
CVE-2023-29881 | Medium | 6.5 | 2024-05-14 | phpok 6.4.003 is vulnerable to SQL injection in the function index_f() in phpok64/framework/api/call_control.php. |
CVE-2024-25533 | Critical | 9.4 | 2024-05-08 | Error messages in RuvarOA v6.01 and v12.01 were discovered to leak the physical path of the website (/WorkFlow/OfficeFileUpdate.aspx). This vulnerability can a… |
CVE-2024-25532 | Critical | 9.8 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the bt_id parameter at /include/get_dict.aspx. |
CVE-2024-25528 | Medium | 5.9 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklog_template_show.aspx. |
CVE-2024-31961 | Critical | 9.8 | 2024-05-08 | A SQL injection vulnerability in unit.php in Sonic Shopfloor.guide before 3.1.3 allows remote attackers to execute arbitrary SQL commands via the level2 parame… |
CVE-2024-25531 | Critical | 9.8 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/SearchCondiction.aspx. |
CVE-2024-25530 | Critical | 9.8 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/get_find_condiction.aspx. |
CVE-2024-25529 | Critical | 9.8 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /WorkFlow/wf_office_file_history_show.aspx. |
CVE-2024-25527 | Critical | 9.4 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklog_template_show.aspx. |
CVE-2024-4654 | Medium | 6.3 | 2024-05-08 | A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has been classified as critical. This affects an unknown part of the file /x… |
CVE-2024-4653 | Medium | 6.3 | 2024-05-08 | A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2024-26026 | High | 7.5 | 2024-05-08 | An SQL injection vulnerability exists in the BIG-IP Next Central Manager API (URI). Note: Software versions which have reached End of Technical Support (EoTS)… |
CVE-2024-25526 | High | 8.1 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the project_id parameter at /ProjectManage/pm_gatt_inc.aspx. |
CVE-2024-25525 | Critical | 9.8 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the filename parameter at /WorkFlow/OfficeFileDownload.aspx. |
CVE-2024-25524 | Critical | 9.4 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkPlan/WorkPlanAttachDownLoad.asp… |
CVE-2024-25523 | Critical | 9.8 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /filemanage/file_memo.aspx. |
CVE-2024-25522 | Critical | 9.4 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the office_missive_id parameter at /WorkFlow/wf_work_form_save.aspx. |
CVE-2024-25521 | Critical | 9.4 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the txt_keyword parameter at get_company.aspx. |
CVE-2024-25520 | Critical | 9.8 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /SysManage/sys_blogtemplate_new.aspx. |
CVE-2024-25519 | Critical | 9.8 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the idlist parameter at /WorkFlow/wf_work_print.aspx. |
CVE-2024-25518 | Critical | 9.4 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /WorkFlow/wf_get_fields_approve.aspx. |
CVE-2024-25517 | Critical | 9.8 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the tbTable argument at /WebUtility/MF.aspx. |
CVE-2024-25515 | High | 7.3 | 2024-05-08 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_work_finish_file_down.a… |
CVE-2024-21793 | High | 7.5 | 2024-05-08 | An OData injection vulnerability exists in the BIG-IP Next Central Manager API (URI). Note: Software versions which have reached End of Technical Support (EoT… |
CVE-2024-25514 | Critical | 9.4 | 2024-05-07 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /SysManage/wf_template_child_field_list.aspx. |
CVE-2024-25513 | High | 7.8 | 2024-05-07 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /CorporateCulture/kaizen_download.aspx. |