CWE-89 · SQL Injection (page 95)
Page 95 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-0705 | Critical | 9.8 | 2024-01-19 | The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.7… |
CVE-2023-5806 | Critical | 9.8 | 2024-01-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mergen Software Quality Management System allows SQL Inje… |
CVE-2024-0655 | Medium | 5.5 | 2024-01-18 | A vulnerability has been found in Novel-Plus 4.3.0-RC1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /nove… |
CVE-2024-0651 | Medium | 6.3 | 2024-01-18 | A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown f… |
CVE-2023-20271 | Medium | 6.5 | 2024-01-17 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authen… |
CVE-2023-5041 | High | 8.8 | 2024-01-17 | The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query… |
CVE-2023-52285 | High | 7.5 | 2024-01-17 | ExamSys 9150244 allows SQL Injection via the /Support/action/Pages.php s_score2 parameter. |
CVE-2024-0405 | High | 7.2 | 2024-01-17 | The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin, version 1.5.3, is vulnerable to Post-Authenticated SQL Injection via multiple JSON para… |
CVE-2024-22406 | Critical | 9.3 | 2024-01-16 | Shopware is an open headless commerce platform. The Shopware application API contains a search functionality which enables users to search through information… |
CVE-2024-22628 | High | 7.2 | 2024-01-16 | Budget and Expense Tracker System v1.0 is vulnerable to SQL Injection via /expense_budget/admin/?page=reports/budget&date_start=2023-12-28&date_end= |
CVE-2024-22627 | High | 7.2 | 2024-01-16 | Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_distributor.php?id=. |
CVE-2024-22626 | High | 7.2 | 2024-01-16 | Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_retailer.php?id=. |
CVE-2024-22625 | High | 7.2 | 2024-01-16 | Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_category.php?id=. |
CVE-2023-6373 | High | 8.8 | 2024-01-16 | The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the "id" parameter before submitting the query, leading to a SQLI exploitable… |
CVE-2023-3211 | Critical | 9.8 | 2024-01-16 | The WordPress Database Administrator WordPress plugin through 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an… |
CVE-2023-2655 | High | 7.2 | 2024-01-16 | The Contact Form by WD WordPress plugin through 1.13.23 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL… |
CVE-2023-0224 | Critical | 9.8 | 2024-01-16 | The GiveWP WordPress plugin before 2.24.1 does not properly escape user input before it reaches SQL queries, which could let unauthenticated attackers perform… |
CVE-2022-3764 | High | 7.2 | 2024-01-16 | The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability. |
CVE-2021-24869 | High | 8.8 | 2024-01-16 | The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to… |
CVE-2021-24151 | High | 7.2 | 2024-01-16 | The WP Editor WordPress plugin before 1.2.7 did not sanitise or validate its setting fields leading to an authenticated (admin+) blind SQL injection issue via… |
CVE-2023-51810 | High | 7.5 | 2024-01-16 | SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted requ… |
CVE-2023-47460 | High | 8.8 | 2024-01-16 | SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /DiscoveryProcess/Service/Admin.svc/getGri… |
CVE-2024-0558 | Medium | 4.7 | 2024-01-15 | A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/makehtml_freelist_action… |
CVE-2023-6620 | High | 7.2 | 2024-01-15 | The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using them in SQL statements, leading to a S… |
CVE-2024-0543 | Medium | 6.3 | 2024-01-15 | A vulnerability classified as critical has been found in CodeAstro Real Estate Management System up to 1.0. This affects an unknown part of the file propertyde… |
CVE-2024-0530 | Medium | 5.5 | 2024-01-15 | A vulnerability was found in CXBSoft Post-Office up to 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /apps/r… |
CVE-2024-0529 | Medium | 5.5 | 2024-01-15 | A vulnerability has been found in CXBSoft Post-Office up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2024-0528 | Medium | 5.5 | 2024-01-15 | A vulnerability, which was classified as critical, was found in CXBSoft Post-Office 1.0. Affected is an unknown function of the file /admin/pages/update_go.php… |
CVE-2024-0527 | Medium | 6.3 | 2024-01-15 | A vulnerability, which was classified as critical, has been found in CXBSoft Url-shorting up to 1.3.1. This issue affects some unknown processing of the file /… |
CVE-2024-0526 | Medium | 5.5 | 2024-01-15 | A vulnerability classified as critical was found in CXBSoft Url-shorting up to 1.3.1. This vulnerability affects unknown code of the file /pages/short_to_long… |
CVE-2024-0525 | Medium | 5.5 | 2024-01-15 | A vulnerability classified as critical has been found in CXBSoft Url-shorting up to 1.3.1. This affects an unknown part of the file /pages/long_s_short.php of… |
CVE-2024-0524 | Medium | 5.5 | 2024-01-15 | A vulnerability was found in CXBSoft Url-shorting up to 1.3.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2024-0523 | Medium | 6.3 | 2024-01-14 | A vulnerability was found in CmsEasy up to 7.7.7. It has been declared as critical. Affected by this vulnerability is the function getslide_child_action in the… |
CVE-2024-0502 | Medium | 4.7 | 2024-01-13 | A vulnerability was found in SourceCodester House Rental Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2024-0498 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in Project Worlds Lawyer Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functi… |
CVE-2024-0497 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes… |
CVE-2024-0496 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in Kashipara Billing Software 1.0 and classified as critical. This issue affects some unknown processing of the file item_list_edit.p… |
CVE-2024-0495 | Medium | 6.3 | 2024-01-13 | A vulnerability has been found in Kashipara Billing Software 1.0 and classified as critical. This vulnerability affects unknown code of the file party_submit.p… |
CVE-2024-0494 | Medium | 6.3 | 2024-01-13 | A vulnerability, which was classified as critical, was found in Kashipara Billing Software 1.0. This affects an unknown part of the file material_bill.php of t… |
CVE-2024-0493 | Medium | 6.3 | 2024-01-13 | A vulnerability, which was classified as critical, has been found in Kashipara Billing Software 1.0. Affected by this issue is some unknown functionality of th… |
CVE-2024-0492 | Medium | 6.3 | 2024-01-13 | A vulnerability classified as critical was found in Kashipara Billing Software 1.0. Affected by this vulnerability is an unknown functionality of the file buye… |
CVE-2024-0489 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of t… |
CVE-2024-0488 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been classified as critical. This affects an unknown part of the file /… |
CVE-2024-0487 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this issue is some unknown functionalit… |
CVE-2024-0486 | Medium | 6.3 | 2024-01-13 | A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown f… |
CVE-2024-0485 | Medium | 6.3 | 2024-01-13 | A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Affected is an unknown function of the file… |
CVE-2024-0484 | Medium | 6.3 | 2024-01-13 | A vulnerability, which was classified as critical, has been found in code-projects Fighting Cock Information System 1.0. This issue affects some unknown proces… |
CVE-2024-0483 | Medium | 6.3 | 2024-01-13 | A vulnerability classified as critical was found in Taokeyun up to 1.0.5. This vulnerability affects the function index of the file application/index/controlle… |
CVE-2024-0482 | Medium | 6.3 | 2024-01-13 | A vulnerability classified as critical has been found in Taokeyun up to 1.0.5. This affects the function index of the file application/index/controller/app/Vid… |
CVE-2024-0481 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in Taokeyun up to 1.0.5. It has been rated as critical. Affected by this issue is the function shopGoods of the file application/inde… |
CVE-2024-0480 | High | 7.3 | 2024-01-13 | A vulnerability was found in Taokeyun up to 1.0.5. It has been declared as critical. Affected by this vulnerability is the function index of the file applicati… |
CVE-2024-0479 | High | 7.3 | 2024-01-13 | A vulnerability was found in Taokeyun up to 1.0.5. It has been classified as critical. Affected is the function login of the file application/index/controller/… |
CVE-2024-0478 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. This issue affects some unknown processing of the f… |
CVE-2024-0477 | Medium | 6.3 | 2024-01-13 | A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. This vulnerability affects unknown code of the… |
CVE-2023-51805 | Medium | 6.5 | 2024-01-13 | SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the sea… |
CVE-2024-0475 | Medium | 6.3 | 2024-01-13 | A vulnerability, which was classified as critical, has been found in code-projects Dormitory Management System 1.0. Affected by this issue is some unknown func… |
CVE-2024-0474 | High | 7.3 | 2024-01-12 | A vulnerability classified as critical was found in code-projects Dormitory Management System 1.0. Affected by this vulnerability is an unknown functionality o… |
CVE-2024-0473 | Medium | 6.3 | 2024-01-12 | A vulnerability classified as critical has been found in code-projects Dormitory Management System 1.0. Affected is an unknown function of the file comment.php… |
CVE-2024-0471 | Medium | 6.3 | 2024-01-12 | A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been declared as critical. This vulnerability affects unknown code of t… |
CVE-2024-0470 | Medium | 6.3 | 2024-01-12 | A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been classified as critical. This affects an unknown part of the file /… |
CVE-2024-0469 | Medium | 6.3 | 2024-01-12 | A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by this issue is some unknown functionalit… |
CVE-2024-0466 | Medium | 5.5 | 2024-01-12 | A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown proc… |
CVE-2024-0464 | Medium | 6.3 | 2024-01-12 | A vulnerability classified as critical has been found in code-projects Online Faculty Clearance 1.0. This affects an unknown part of the file delete_faculty.ph… |
CVE-2024-0463 | Medium | 6.3 | 2024-01-12 | A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2024-0462 | Medium | 6.3 | 2024-01-12 | A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functio… |
CVE-2024-0461 | Medium | 6.3 | 2024-01-12 | A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been classified as critical. Affected is an unknown function of the file deacti… |
CVE-2024-0460 | Medium | 6.3 | 2024-01-12 | A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ad… |
CVE-2024-0459 | Medium | 4.7 | 2024-01-12 | A vulnerability has been found in Blood Bank & Donor Management 5.6 and classified as critical. This vulnerability affects unknown code of the file /admin/requ… |
CVE-2023-51978 | Medium | 6.5 | 2024-01-12 | In PHPGurukul Art Gallery Management System v1.1, "Update Artist Image" functionality of "imageid" parameter is vulnerable to SQL Injection. |
CVE-2023-30016 | Critical | 9.8 | 2024-01-12 | SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via… |
CVE-2023-30015 | Critical | 9.8 | 2024-01-12 | SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via… |
CVE-2023-30014 | Critical | 9.8 | 2024-01-12 | SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via… |
CVE-2022-4961 | Medium | 5.5 | 2024-01-12 | A vulnerability was found in Weitong Mall 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file platf… |
CVE-2024-0426 | Medium | 6.3 | 2024-01-11 | A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. This issue affects some unknown processing of the file admin/cm… |
CVE-2024-22196 | High | 7.0 | 2024-01-11 | Nginx-UI is an online statistics for Server Indicators Monitor CPU usage, memory usage, load average, and disk usage in real-time. This issue may lead to inf… |
CVE-2023-6567 | Critical | 9.8 | 2024-01-11 | The LearnPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_by’ parameter in all versions up to, and including, 4.2.5.7 due to… |
CVE-2023-52064 | Critical | 9.8 | 2024-01-10 | Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords parameter at /core/admin/copyfrom.php. |
CVE-2024-0389 | Medium | 6.3 | 2024-01-10 | A vulnerability, which was classified as critical, was found in SourceCodester Student Attendance System 1.0. Affected is an unknown function of the file atten… |
CVE-2023-48261 | Medium | 5.3 | 2024-01-10 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request. |
CVE-2023-48260 | Medium | 5.3 | 2024-01-10 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request. |
CVE-2023-48259 | Medium | 5.3 | 2024-01-10 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request. |
CVE-2023-48253 | High | 8.8 | 2024-01-10 | The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request. By abu… |
CVE-2020-26630 | Medium | 4.9 | 2024-01-10 | A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a speci… |
CVE-2020-26627 | Medium | 4.9 | 2024-01-10 | A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a craft… |
CVE-2023-48864 | High | 7.5 | 2024-01-10 | SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /web_inc.php. |
CVE-2024-0364 | Medium | 5.5 | 2024-01-10 | A vulnerability, which was classified as critical, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file admin/query… |
CVE-2024-0363 | Medium | 5.5 | 2024-01-10 | A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown function… |
CVE-2024-0362 | Medium | 5.5 | 2024-01-10 | A vulnerability classified as critical was found in PHPGurukul Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of th… |
CVE-2024-0361 | Medium | 5.5 | 2024-01-10 | A vulnerability classified as critical has been found in PHPGurukul Hospital Management System 1.0. Affected is an unknown function of the file admin/contact.p… |
CVE-2024-0360 | Medium | 5.5 | 2024-01-10 | A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file a… |
CVE-2024-0359 | High | 7.3 | 2024-01-10 | A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown cod… |
CVE-2024-0357 | Medium | 5.5 | 2024-01-10 | A vulnerability was found in coderd-repos Eva 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the file /system/traceL… |
CVE-2024-0355 | Medium | 5.5 | 2024-01-10 | A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1. Affected is an unknown function of the… |
CVE-2024-0344 | Medium | 5.5 | 2024-01-09 | A vulnerability, which was classified as critical, has been found in soxft TimeMail up to 1.1. Affected by this issue is some unknown functionality of the file… |
CVE-2024-0342 | Medium | 6.3 | 2024-01-09 | A vulnerability classified as critical has been found in Inis up to 2.0.1. Affected is an unknown function of the file /app/api/controller/default/Sqlite.php… |
CVE-2023-39336 | High | 8.8 | 2024-01-09 | An unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5 allows an attacker with access to the internal network to ex… |
CVE-2023-50162 | High | 7.2 | 2024-01-09 | SQL injection vulnerability in EmpireCMS v7.5, allows remote attackers to execute arbitrary code and obtain sensitive information via the DoExecSql function. |
CVE-2023-52201 | High | 7.6 | 2024-01-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brian D. Goad pTypeConverter.This issue affects pTypeConv… |
CVE-2023-52142 | High | 7.6 | 2024-01-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cool Plugins Events Shortcodes For The Events Calendar.Th… |
CVE-2023-52204 | High | 8.5 | 2024-01-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Javik Randomize.This issue affects Randomize: from n/a th… |