CWE-89 · SQL Injection (page 98)
Page 98 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-31092 | Medium | 5.5 | 2023-12-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Foxskav Easy Bet.This issue affects Easy Bet: from n/a th… |
CVE-2023-47852 | High | 8.5 | 2023-12-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper Link Whisper Free.This issue affects Link Wh… |
CVE-2023-40010 | Critical | 9.3 | 2023-12-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in realmag777 HUSKY – Products Filter for WooCommerce Profes… |
CVE-2023-32590 | Critical | 9.3 | 2023-12-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel Söderström / Sidney van de Stouwe Subscribe to Cat… |
CVE-2023-47236 | High | 7.6 | 2023-12-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Avirtum iPages Flipbook For WordPress.This issue affects… |
CVE-2023-38519 | High | 7.6 | 2023-12-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MainWP MainWP Dashboard – WordPress Manager for Multiple… |
CVE-2023-49764 | High | 7.6 | 2023-12-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Younes JFR. Advanced Database Cleaner.This issue affects… |
CVE-2023-49750 | Critical | 9.3 | 2023-12-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spoonthemes Couponis - Affiliate & Submitting Coupons Wor… |
CVE-2023-48764 | High | 7.6 | 2023-12-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GuardGiant Brute Force Protection WordPress Brute Force P… |
CVE-2023-48741 | High | 7.6 | 2023-12-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud AI ChatBot.This issue affects AI ChatBot: fr… |
CVE-2023-48738 | Critical | 9.3 | 2023-12-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Porto Theme Porto Theme - Functionality.This issue affect… |
CVE-2023-48327 | High | 7.6 | 2023-12-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Vendors WC Vendors – WooCommerce Multi-Vendor, WooComm… |
CVE-2023-49736 | Medium | 6.5 | 2023-12-19 | A where_in JINJA macro allows users to specify a quote, which combined with a carefully crafted statement would allow for SQL injection in Apache Superset.This… |
CVE-2023-47558 | High | 7.6 | 2023-12-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mahlamusa Who Hit The Page – Hit Counter allows SQL Injec… |
CVE-2023-47530 | High | 7.6 | 2023-12-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPVibes Redirect 404 Error Page to Homepage or Custom Pag… |
CVE-2023-47506 | High | 7.6 | 2023-12-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Master slider Master Slider Pro allows SQL Injection.This… |
CVE-2023-34168 | High | 7.6 | 2023-12-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alex Raven WP Report Post allows SQL Injection.This issue… |
CVE-2023-33331 | High | 8.5 | 2023-12-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Product Vendors allows SQL Injection.This iss… |
CVE-2023-6903 | High | 7.3 | 2023-12-17 | A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file /admin/s… |
CVE-2023-6898 | Medium | 5.5 | 2023-12-17 | A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function of the file manage_… |
CVE-2023-6885 | Medium | 5.5 | 2023-12-16 | A vulnerability was found in Tongda OA 2017 up to 11.10. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the fi… |
CVE-2023-30867 | Medium | 4.9 | 2023-12-15 | In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fuzzy search, such as job names, role nam… |
CVE-2023-48395 | Medium | 6.5 | 2023-12-15 | Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special function. A remote attacker with regular… |
CVE-2023-48384 | Critical | 9.8 | 2023-12-15 | ArmorX Global Technology Corporation ArmorX Spam has insufficient validation for user input within a special function. An unauthenticated remote attacker can e… |
CVE-2023-48372 | Critical | 9.8 | 2023-12-15 | ITPison OMICARD EDM 's SMS-related function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to in… |
CVE-2023-48050 | Critical | 9.8 | 2023-12-15 | SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance (aka odoo-biometric-attendance) v. 13.0 thro… |
CVE-2023-40954 | Critical | 9.8 | 2023-12-15 | A SQL injection vulnerability in Grzegorz Marczynski Dynamic Progress Bar (aka web_progress) v. 11.0 through 11.0.2, v12.0 through v12.0.2, v.13.0 through v13… |
CVE-2023-48049 | Critical | 9.8 | 2023-12-15 | A SQL injection vulnerability in Cybrosys Techno Solutions Website Blog Search (aka website_search_blog) v. 13.0 through 13.0.1.0.1 allows a remote attacker to… |
CVE-2023-44284 | Medium | 4.3 | 2023-12-14 | Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability. A remote low privileged att… |
CVE-2023-50563 | Critical | 9.8 | 2023-12-14 | Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMS_Function.php. |
CVE-2023-50073 | Critical | 9.8 | 2023-12-14 | EmpireCMS v7.5 was discovered to contain a SQL injection vulnerability via the ftppassword parameter at SetEnews.php. |
CVE-2023-49708 | Critical | 9.8 | 2023-12-14 | SQLi vulnerability in Starshop component for Joomla. |
CVE-2023-49707 | Critical | 9.8 | 2023-12-14 | SQLi vulnerability in S5 Register module for Joomla. |
CVE-2023-48925 | Critical | 9.8 | 2023-12-14 | SQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to escalate privileges and obtain sensitive information via the com… |
CVE-2023-46348 | Critical | 9.8 | 2023-12-14 | SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookA… |
CVE-2023-40629 | Critical | 9.8 | 2023-12-14 | SQLi vulnerability in LMS Lite component for Joomla. |
CVE-2023-48084 | Critical | 9.8 | 2023-12-14 | Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool. |
CVE-2023-25651 | Medium | 4.3 | 2023-12-14 | There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated… |
CVE-2023-49934 | Critical | 9.8 | 2023-12-14 | An issue was discovered in SchedMD Slurm 23.11.x. There is SQL Injection against the SlurmDBD database. The fixed version is 23.11.1. |
CVE-2023-40921 | Critical | 9.8 | 2023-12-14 | SQL Injection vulnerability in functions/point_list.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive information via the la… |
CVE-2023-6772 | Medium | 4.7 | 2023-12-13 | A vulnerability, which was classified as critical, was found in OTCMS 7.01. Affected is an unknown function of the file /admin/ind_backstage.php. The manipulat… |
CVE-2023-6771 | Medium | 5.5 | 2023-12-13 | A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0. This issue affects the function save_… |
CVE-2023-46727 | High | 8.6 | 2023-12-13 | GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, GLPI inventory endpoint can be used to drive… |
CVE-2023-43813 | Medium | 6.5 | 2023-12-13 | GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, the saved search feature can be used to perfo… |
CVE-2023-6765 | Medium | 5.5 | 2023-12-13 | A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects the function prepar… |
CVE-2023-49363 | Critical | 9.8 | 2023-12-13 | Rockoa <2.3.3 is vulnerable to SQL Injection. The problem exists in the indexAction method in reimpAction.php. |
CVE-2023-6755 | Medium | 4.7 | 2023-12-13 | A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/content_batchup_action.p… |
CVE-2023-45800 | High | 7.5 | 2023-12-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hanbiro Hanbiro groupware allows Information Elicitation… |
CVE-2023-41623 | High | 7.2 | 2023-12-12 | Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php. |
CVE-2023-49581 | Medium | 4.1 | 2023-12-12 | SAP GUI for Windows and SAP GUI for Java allow an unauthenticated attacker to access information which would otherwise be restricted and confidential. In addit… |
CVE-2023-36652 | Medium | 4.3 | 2023-12-12 | A SQL Injection in the users searching REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to read database data via SQL co… |
CVE-2023-6035 | High | 8.8 | 2023-12-11 | The EazyDocs WordPress plugin before 2.3.4 does not properly sanitize and escape "data" parameter before using it in an SQL statement via an AJAX action, which… |
CVE-2023-6659 | Medium | 6.3 | 2023-12-11 | A vulnerability, which was classified as critical, has been found in Campcodes Web-Based Student Clearance System 1.0. This issue affects some unknown processi… |
CVE-2023-6658 | Medium | 5.5 | 2023-12-10 | A vulnerability classified as critical was found in SourceCodester Simple Student Attendance System 1.0. This vulnerability affects unknown code of the file aj… |
CVE-2023-6657 | Medium | 5.5 | 2023-12-10 | A vulnerability classified as critical has been found in SourceCodester Simple Student Attendance System 1.0. This affects an unknown part of the file /modals/… |
CVE-2023-6655 | High | 7.3 | 2023-12-10 | A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /w_se… |
CVE-2023-6652 | High | 7.3 | 2023-12-10 | A vulnerability was found in code-projects Matrimonial Site 1.0. It has been declared as critical. Affected by this vulnerability is the function register of t… |
CVE-2023-6651 | High | 7.3 | 2023-12-10 | A vulnerability was found in code-projects Matrimonial Site 1.0. It has been classified as critical. Affected is an unknown function of the file /auth/auth.php… |
CVE-2023-6648 | High | 7.3 | 2023-12-10 | A vulnerability, which was classified as critical, was found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file… |
CVE-2023-6647 | High | 7.3 | 2023-12-10 | A vulnerability, which was classified as critical, has been found in AMTT HiBOS 1.0. Affected by this issue is some unknown functionality. The manipulation of… |
CVE-2023-50429 | Critical | 9.1 | 2023-12-09 | IzyBat Orange casiers before 20230803_1 allows getEnsemble.php ensemble SQL injection. |
CVE-2023-6619 | Medium | 5.5 | 2023-12-08 | A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been rated as critical. Affected by this issue is some unknown functio… |
CVE-2023-6617 | Medium | 5.5 | 2023-12-08 | A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as critical. Affected is an unknown function of the fi… |
CVE-2023-6611 | Medium | 5.5 | 2023-12-08 | A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file pda/pad/email/del… |
CVE-2023-6608 | Medium | 5.5 | 2023-12-08 | A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/not… |
CVE-2023-6607 | Medium | 5.5 | 2023-12-08 | A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2023-43743 | High | 8.8 | 2023-12-08 | A SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch… |
CVE-2023-5008 | Critical | 9.8 | 2023-12-08 | Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an externa… |
CVE-2023-6581 | Medium | 5.5 | 2023-12-07 | A vulnerability has been found in D-Link DAR-7000 up to 20231126 and classified as critical. This vulnerability affects unknown code of the file /user/inc/work… |
CVE-2023-6579 | High | 7.3 | 2023-12-07 | A vulnerability, which was classified as critical, has been found in osCommerce 4. Affected by this issue is some unknown functionality of the file /b2b-superm… |
CVE-2023-6575 | Medium | 6.3 | 2023-12-07 | A vulnerability was found in Byzoro S210 up to 20231121. It has been classified as critical. This affects an unknown part of the file /Tool/repair.php of the c… |
CVE-2023-49429 | Critical | 9.8 | 2023-12-07 | Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/se… |
CVE-2023-48823 | Critical | 9.8 | 2023-12-07 | A Blind SQL injection issue in ajax.php in GaatiTrack Courier Management System 1.0 allows an unauthenticated attacker to inject a payload via the email parame… |
CVE-2023-5761 | Critical | 9.8 | 2023-12-07 | The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'url' parameter in versions 1.4.0 t… |
CVE-2023-46353 | Critical | 9.8 | 2023-12-06 | In the module "Product Tag Icons Pro" (ticons) before 1.8.4 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The method TiconProduct::getTic… |
CVE-2023-6063 | High | 7.5 | 2023-12-04 | The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injec… |
CVE-2023-5108 | High | 7.2 | 2023-12-04 | The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a S… |
CVE-2023-48863 | High | 7.5 | 2023-12-04 | SEMCMS 3.9 is vulnerable to SQL Injection. Due to the lack of security checks on the input of the application, the attacker uses the existing application to in… |
CVE-2020-36768 | High | 7.3 | 2023-12-03 | A vulnerability was found in rl-institut NESP2 Initial Release/1.0. It has been classified as critical. Affected is an unknown function of the file app/databas… |
CVE-2023-6464 | Medium | 6.3 | 2023-12-02 | A vulnerability was found in SourceCodester User Registration and Login System 1.0 and classified as critical. Affected by this issue is some unknown functiona… |
CVE-2023-48893 | High | 8.8 | 2023-12-01 | SLiMS (aka SENAYAN Library Management System) through 9.6.1 allows admin/modules/reporting/customs/staff_act.php SQL Injection via startDate or untilDate. |
CVE-2023-48813 | High | 8.8 | 2023-12-01 | Senayan Library Management Systems (Slims) 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/customs/fines_report.php. |
CVE-2023-49371 | Critical | 9.8 | 2023-12-01 | RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit. |
CVE-2023-5634 | Critical | 9.8 | 2023-12-01 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ArslanSoft Education Portal allows SQL Injection. This i… |
CVE-2023-48016 | High | 7.5 | 2023-12-01 | Restaurant Table Booking System V1.0 is vulnerable to SQL Injection in rtbs/admin/index.php via the username parameter. |
CVE-2023-46956 | High | 7.2 | 2023-11-30 | SQL injection vulnerability in Packers and Movers Management System v.1.0 allows a remote attacker to execute arbitrary code via crafted payload to the /mpms/a… |
CVE-2023-6360 | High | 8.6 | 2023-11-30 | The 'My Calendar' WordPress Plugin, version < 3.4.22 is affected by an unauthenticated SQL injection vulnerability in the 'from' and 'to' parameters in the '/m… |
CVE-2023-6402 | Medium | 6.3 | 2023-11-30 | A vulnerability, which was classified as critical, was found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file… |
CVE-2023-6418 | Critical | 9.8 | 2023-11-30 | A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via videos.php in the id parameter… |
CVE-2023-6417 | Critical | 9.8 | 2023-11-30 | A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via update.php in the id parameter… |
CVE-2023-6416 | Critical | 9.8 | 2023-11-30 | A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via signup2.php in the emailadd pa… |
CVE-2023-6415 | Critical | 9.8 | 2023-11-30 | A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via signin.php in the user paramet… |
CVE-2023-6414 | Critical | 9.8 | 2023-11-30 | A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via perfil.php in the id and user… |
CVE-2023-6413 | Critical | 9.8 | 2023-11-30 | A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via photos.php in the id and user… |
CVE-2023-6412 | Critical | 9.8 | 2023-11-30 | A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via photo.php in multiple paramete… |
CVE-2023-6411 | Critical | 9.8 | 2023-11-30 | A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via home.php in the update paramet… |
CVE-2023-6410 | Critical | 9.8 | 2023-11-30 | A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via editprofile.php in multiple pa… |
CVE-2023-48742 | High | 7.6 | 2023-11-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LicenseManager License Manager for WooCommerce license-ma… |
CVE-2022-45135 | Critical | 9.8 | 2023-11-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Cocoon.This issue affects Apache Cocoon: from 2.2… |
CVE-2023-40056 | High | 8.0 | 2023-11-28 | SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform. This vulnerability can be exploited with a low privileged account. … |