CWE-89 · SQL Injection (page 96)
Page 96 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-52215 | Critical | 9.3 | 2024-01-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UkrSolution Simple Inventory Management – just scan barco… |
CVE-2024-21747 | High | 7.6 | 2024-01-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP | Complete HR solution with recruitment & j… |
CVE-2023-6921 | Critical | 9.8 | 2024-01-08 | Blind SQL Injection vulnerability in PrestaShow Google Integrator (PrestaShop addon) allows for data extraction and modification. This attack is possible via c… |
CVE-2024-0307 | High | 7.3 | 2024-01-08 | A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of th… |
CVE-2024-0306 | High | 7.3 | 2024-01-08 | A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /a… |
CVE-2024-0301 | Medium | 6.3 | 2024-01-08 | A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/mai… |
CVE-2024-0290 | Medium | 6.3 | 2024-01-08 | A vulnerability, which was classified as critical, has been found in Kashipara Food Management System 1.0. This issue affects some unknown processing of the fi… |
CVE-2024-0289 | Medium | 6.3 | 2024-01-08 | A vulnerability classified as critical was found in Kashipara Food Management System 1.0. This vulnerability affects unknown code of the file stock_entry_submi… |
CVE-2024-0288 | Medium | 6.3 | 2024-01-08 | A vulnerability classified as critical has been found in Kashipara Food Management System 1.0. This affects an unknown part of the file rawstock_used_damaged_s… |
CVE-2024-0287 | Medium | 6.3 | 2024-01-07 | A vulnerability was found in Kashipara Food Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2024-0281 | Medium | 6.3 | 2024-01-07 | A vulnerability was found in Kashipara Food Management System up to 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2024-0280 | Medium | 6.3 | 2024-01-07 | A vulnerability has been found in Kashipara Food Management System up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functiona… |
CVE-2024-0279 | Medium | 6.3 | 2024-01-07 | A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. Affected is an unknown function of the file item_li… |
CVE-2024-0278 | Medium | 6.3 | 2024-01-07 | A vulnerability, which was classified as critical, has been found in Kashipara Food Management System up to 1.0. This issue affects some unknown processing of… |
CVE-2024-0277 | Medium | 6.3 | 2024-01-07 | A vulnerability classified as critical was found in Kashipara Food Management System up to 1.0. This vulnerability affects unknown code of the file party_submi… |
CVE-2024-0276 | Medium | 6.3 | 2024-01-07 | A vulnerability classified as critical has been found in Kashipara Food Management System up to 1.0. This affects an unknown part of the file rawstock_used_dam… |
CVE-2024-0275 | Medium | 6.3 | 2024-01-07 | A vulnerability was found in Kashipara Food Management System up to 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2024-0274 | Medium | 6.3 | 2024-01-07 | A vulnerability was found in Kashipara Food Management System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functio… |
CVE-2024-0273 | Medium | 6.3 | 2024-01-07 | A vulnerability was found in Kashipara Food Management System up to 1.0. It has been classified as critical. Affected is an unknown function of the file addwas… |
CVE-2024-0272 | Medium | 6.3 | 2024-01-07 | A vulnerability was found in Kashipara Food Management System up to 1.0 and classified as critical. This issue affects some unknown processing of the file addm… |
CVE-2024-0271 | Medium | 6.3 | 2024-01-07 | A vulnerability has been found in Kashipara Food Management System up to 1.0 and classified as critical. This vulnerability affects unknown code of the file ad… |
CVE-2024-0270 | Medium | 6.3 | 2024-01-07 | A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. This affects an unknown part of the file item_list_… |
CVE-2024-0268 | High | 7.3 | 2024-01-07 | A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Affected by this issue is some unknown fun… |
CVE-2024-0267 | High | 7.3 | 2024-01-07 | A vulnerability classified as critical was found in Kashipara Hospital Management System up to 1.0. Affected by this vulnerability is an unknown functionality… |
CVE-2023-46953 | Critical | 9.8 | 2024-01-06 | SQL Injection vulnerability in ABO.CMS v.5.9.3, allows remote attackers to execute arbitrary code via the d parameter in the Documents module. |
CVE-2023-39853 | Medium | 6.5 | 2024-01-06 | SQL Injection vulnerability in Dzzoffice version 2.01, allows remote attackers to obtain sensitive information via the doobj and doevent parameters in the Netw… |
CVE-2024-0247 | High | 7.3 | 2024-01-05 | A vulnerability classified as critical was found in CodeAstro Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /admin/ of t… |
CVE-2023-47219 | Low | 3.5 | 2024-01-05 | A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via… |
CVE-2023-41287 | Medium | 4.3 | 2024-01-05 | A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to inject malicious code via a netwo… |
CVE-2023-50027 | Critical | 9.8 | 2024-01-05 | SQL Injection vulnerability in Buy Addons baproductzoommagnifier module for PrestaShop versions 1.0.16 and before, allows remote attackers to escalate privileg… |
CVE-2023-50867 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the signupAction.php resource does not… |
CVE-2023-50866 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginAction.php resource does not… |
CVE-2023-50865 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'city' parameter of the hotelSearch.php resource does not vali… |
CVE-2023-50864 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelId' parameter of the hotelDetails.php resource does not… |
CVE-2023-50863 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' parameter of the generateReceipt.php resource… |
CVE-2023-50862 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' parameter of the booking.php resource does not… |
CVE-2023-50753 | Critical | 9.8 | 2024-01-04 | Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the user/update_profile.php reso… |
CVE-2023-50752 | Critical | 9.8 | 2024-01-04 | Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'e' parameter of the login.php resource does not v… |
CVE-2023-50743 | Critical | 9.8 | 2024-01-04 | Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the registration.php resource do… |
CVE-2023-49666 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'custmer_details' parameter of the submit_material_list.php… |
CVE-2023-49665 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'quantity[]' parameter of the submit_delivery_list.php resou… |
CVE-2023-49658 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'bank_details' parameter of the party_submit.php resource do… |
CVE-2023-49639 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'customer_details' parameter of the buyer_invoice_submit.php… |
CVE-2023-49633 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'buyer_address' parameter of the buyer_detail_submit.php res… |
CVE-2023-49625 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partylist_edit_submit.php resource doe… |
CVE-2023-49624 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cancelid' parameter of the material_bill.php resource does… |
CVE-2023-49622 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'itemnameid' parameter of the material_bill.php?action=itemR… |
CVE-2023-6981 | Medium | 6.1 | 2024-01-03 | The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin for WordPress is vulnerable to SQL Injection via the 'group_id'… |
CVE-2020-26625 | Low | 3.8 | 2024-01-02 | A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the 'user_id' p… |
CVE-2020-26624 | Low | 3.8 | 2024-01-02 | A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the ID paramete… |
CVE-2020-26623 | Low | 3.8 | 2024-01-02 | SQL Injection vulnerability discovered in Gila CMS 1.15.4 and earlier allows a remote attacker to execute arbitrary web scripts via the Area parameter under th… |
CVE-2023-6436 | Critical | 9.8 | 2024-01-02 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ekol Informatics Website Template allows SQL Injection. … |
CVE-2024-0182 | High | 7.3 | 2024-01-01 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2023-52133 | High | 8.5 | 2023-12-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WhileTrue Most And Least Read Posts Widget.This issue aff… |
CVE-2023-52132 | High | 7.6 | 2023-12-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jewel Theme WP Adminify.This issue affects WP Adminify: f… |
CVE-2023-52131 | High | 7.6 | 2023-12-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Zinc Page Generator.This issue affects Page Generator… |
CVE-2023-51547 | High | 7.6 | 2023-12-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPManageNinja LLC Fluent Support – WordPress Helpdesk and… |
CVE-2023-51469 | Critical | 9.3 | 2023-12-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mestres do WP Checkout Mestres WP.This issue affects Chec… |
CVE-2023-51423 | Critical | 9.3 | 2023-12-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saleswonder Team Webinar Plugin: Create live/evergreen/au… |
CVE-2023-52134 | High | 7.6 | 2023-12-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eyal Fitoussi GEO my WordPress.This issue affects GEO my… |
CVE-2023-7191 | Medium | 5.5 | 2023-12-31 | A vulnerability, which was classified as critical, was found in S-CMS up to 2.0_build20220529-20231006. This affects an unknown part of the file member/reg.php… |
CVE-2023-7190 | Medium | 5.5 | 2023-12-31 | A vulnerability, which was classified as critical, has been found in S-CMS up to 2.0_build20220529-20231006. Affected by this issue is some unknown functionali… |
CVE-2023-7189 | Medium | 5.5 | 2023-12-31 | A vulnerability classified as critical was found in S-CMS up to 2.0_build20220529-20231006. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2023-7188 | Medium | 5.0 | 2023-12-31 | A vulnerability classified as critical has been found in Shipping 100 Fahuo100 up to 1.1. Affected is an unknown function of the file member/login.php. The man… |
CVE-2023-7186 | Medium | 5.5 | 2023-12-31 | A vulnerability was found in 7-card Fakabao up to 1.0_build20230805. It has been declared as critical. This vulnerability affects unknown code of the file memb… |
CVE-2023-7185 | Medium | 5.5 | 2023-12-31 | A vulnerability was found in 7-card Fakabao up to 1.0_build20230805. It has been classified as critical. This affects an unknown part of the file shop/wxpay_no… |
CVE-2023-7184 | Medium | 5.5 | 2023-12-31 | A vulnerability was found in 7-card Fakabao up to 1.0_build20230805 and classified as critical. Affected by this issue is some unknown functionality of the fil… |
CVE-2023-7183 | Medium | 5.5 | 2023-12-31 | A vulnerability has been found in 7-card Fakabao up to 1.0_build20230805 and classified as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2023-52180 | High | 7.6 | 2023-12-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog fro… |
CVE-2023-7130 | Medium | 6.3 | 2023-12-31 | A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionalit… |
CVE-2023-7180 | Medium | 5.5 | 2023-12-30 | A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2023-7179 | Medium | 4.7 | 2023-12-30 | A vulnerability, which was classified as critical, was found in Campcodes Online College Library System 1.0. Affected is an unknown function of the file /admin… |
CVE-2023-7178 | Medium | 4.7 | 2023-12-30 | A vulnerability, which was classified as critical, has been found in Campcodes Online College Library System 1.0. This issue affects some unknown processing of… |
CVE-2023-50589 | Critical | 9.8 | 2023-12-30 | Grupo Embras GEOSIAP ERP v2.2.167.02 was discovered to contain a SQL injection vulnerability via the codLogin parameter on the login page. |
CVE-2023-7177 | Medium | 4.7 | 2023-12-30 | A vulnerability classified as critical was found in Campcodes Online College Library System 1.0. This vulnerability affects unknown code of the file /admin/boo… |
CVE-2023-7176 | Medium | 4.7 | 2023-12-30 | A vulnerability classified as critical has been found in Campcodes Online College Library System 1.0. This affects an unknown part of the file /admin/return_ad… |
CVE-2023-50578 | Critical | 9.8 | 2023-12-30 | Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do. |
CVE-2023-7175 | Medium | 4.7 | 2023-12-30 | A vulnerability was found in Campcodes Online College Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality o… |
CVE-2023-7172 | High | 7.3 | 2023-12-30 | A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown function… |
CVE-2023-41543 | Critical | 9.8 | 2023-12-30 | SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replic… |
CVE-2023-41542 | Critical | 9.8 | 2023-12-30 | SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qures… |
CVE-2023-50071 | High | 8.8 | 2023-12-29 | Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_department via id or name. |
CVE-2023-50070 | High | 8.8 | 2023-12-29 | Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via department_id, custo… |
CVE-2023-50035 | Critical | 9.8 | 2023-12-29 | PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any… |
CVE-2023-4675 | Critical | 9.8 | 2023-12-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GM Information Technologies MDO allows SQL Injection. Th… |
CVE-2023-4674 | Critical | 9.8 | 2023-12-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yaztek Software Technologies and Computer Systems E-Comme… |
CVE-2023-4541 | Critical | 9.8 | 2023-12-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ween Software Admin Panel allows SQL Injection. This iss… |
CVE-2023-50837 | High | 7.6 | 2023-12-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WebFactory Ltd Login Lockdown – Protect Login Form.This i… |
CVE-2023-44088 | Medium | 5.9 | 2023-12-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. Arbitrary SQL qu… |
CVE-2023-52135 | High | 7.6 | 2023-12-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WS Form WS Form LITE – Drag & Drop Contact Form Builder f… |
CVE-2023-7161 | High | 7.3 | 2023-12-29 | A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file index.ph… |
CVE-2023-23634 | Critical | 9.8 | 2023-12-29 | SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity… |
CVE-2023-7157 | Medium | 6.3 | 2023-12-29 | A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0 and classified as critical. This issue affects some unknown pr… |
CVE-2023-7156 | High | 7.3 | 2023-12-29 | A vulnerability has been found in Campcodes Online College Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file i… |
CVE-2023-7155 | Medium | 6.3 | 2023-12-29 | A vulnerability, which was classified as critical, was found in SourceCodester Free and Open Source Inventory Management System 1.0. This affects an unknown pa… |
CVE-2023-7146 | Medium | 6.3 | 2023-12-29 | A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjectDelete of the file… |
CVE-2023-7145 | Medium | 6.3 | 2023-12-29 | A vulnerability classified as critical was found in gopeak MasterLab up to 3.3.10. This vulnerability affects the function sqlInject of the file app/ctrl/Frame… |
CVE-2023-7144 | Medium | 6.3 | 2023-12-29 | A vulnerability classified as critical has been found in gopeak MasterLab up to 3.3.10. This affects the function sqlInject of the file app/ctrl/framework/Feat… |
CVE-2023-7142 | Medium | 4.3 | 2023-12-29 | A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functio… |
CVE-2023-7141 | Medium | 4.3 | 2023-12-29 | A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin… |