CWE-89 · SQL Injection (page 99)
Page 99 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-29870 | Critical | 9.8 | 2024-03-21 | SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter./sentrifugo/index.php/in… |
CVE-2024-29732 | Critical | 9.8 | 2024-03-21 | A SQL Injection has been found on SCAN_VISIO eDocument Suite Web Viewer of Abast. This vulnerability allows an unauthenticated user to retrieve, update and del… |
CVE-2023-48901 | Critical | 9.8 | 2024-03-21 | A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL commands via the paramet… |
CVE-2024-2713 | Medium | 6.3 | 2024-03-21 | A vulnerability, which was classified as critical, was found in Campcodes Complete Online DJ Booking System 1.0. Affected is an unknown function of the file /a… |
CVE-2024-2712 | Medium | 6.3 | 2024-03-21 | A vulnerability, which was classified as critical, has been found in Campcodes Complete Online DJ Booking System 1.0. This issue affects some unknown processin… |
CVE-2024-2015 | Medium | 6.3 | 2024-03-21 | A vulnerability, which was classified as critical, has been found in ZhiCms 4.0. This issue affects the function getindexdata of the file app/index/controller/… |
CVE-2024-2014 | High | 7.3 | 2024-03-21 | A vulnerability classified as critical was found in Panabit Panalog 202103080942. This vulnerability affects unknown code of the file /Maintain/sprog_upstatus… |
CVE-2024-25239 | Critical | 9.8 | 2024-03-21 | SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL commands via crafted POST request to /emloy… |
CVE-2024-24813 | High | 7.5 | 2024-03-21 | Frappe is a full-stack web application framework. Prior to versions 14.64.0 and 15.0.0, SQL injection from a particular whitelisted method can result in access… |
CVE-2024-24110 | Medium | 6.5 | 2024-03-21 | SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spre… |
CVE-2023-38825 | Medium | 6.5 | 2024-03-21 | SQL injection vulnerability in Vanderbilt REDCap before v.13.8.0 allows a remote attacker to obtain sensitive information via the password reset mechanism in M… |
CVE-2022-4963 | Medium | 5.5 | 2024-03-21 | A vulnerability was found in Folio Spring Module Core up to 1.1.5. It has been rated as critical. Affected by this issue is the function dropSchema of the file… |
CVE-2024-2714 | Medium | 6.3 | 2024-03-20 | A vulnerability has been found in Campcodes Complete Online DJ Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown func… |
CVE-2024-28395 | Critical | 9.8 | 2024-03-20 | SQL injection vulnerability in Best-Kit bestkit_popup v.1.7.2 and before allows a remote attacker to escalate privileges via the bestkit_popup.php component. |
CVE-2024-28392 | Critical | 9.8 | 2024-03-20 | SQL injection vulnerability in pscartabandonmentpro v.2.0.11 and before allows a remote attacker to escalate privileges via the pscartabandonmentproFrontCAPUns… |
CVE-2024-2687 | Medium | 6.3 | 2024-03-20 | A vulnerability was found in Campcodes Online Job Finder System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/a… |
CVE-2024-2678 | Medium | 6.3 | 2024-03-20 | A vulnerability was found in Campcodes Online Job Finder System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fil… |
CVE-2024-2677 | Medium | 6.3 | 2024-03-20 | A vulnerability has been found in Campcodes Online Job Finder System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2024-1711 | Critical | 9.8 | 2024-03-20 | The Create by Mediavine plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.9.4 due to insuffici… |
CVE-2024-2676 | Medium | 6.3 | 2024-03-20 | A vulnerability, which was classified as critical, was found in Campcodes Online Job Finder System 1.0. Affected is an unknown function of the file /admin/comp… |
CVE-2024-2675 | Medium | 6.3 | 2024-03-20 | A vulnerability, which was classified as critical, has been found in Campcodes Online Job Finder System 1.0. This issue affects some unknown processing of the… |
CVE-2024-2674 | Medium | 6.3 | 2024-03-20 | A vulnerability classified as critical was found in Campcodes Online Job Finder System 1.0. This vulnerability affects unknown code of the file /admin/employee… |
CVE-2024-2673 | Medium | 6.3 | 2024-03-20 | A vulnerability classified as critical has been found in Campcodes Online Job Finder System 1.0. This affects an unknown part of the file /admin/login.php. The… |
CVE-2024-2672 | Medium | 6.3 | 2024-03-20 | A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the… |
CVE-2024-2671 | Medium | 6.3 | 2024-03-20 | A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2024-2670 | Medium | 6.3 | 2024-03-20 | A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/vac… |
CVE-2024-1799 | High | 8.8 | 2024-03-20 | The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to SQL Injection via… |
CVE-2024-2669 | Medium | 6.3 | 2024-03-20 | A vulnerability was found in Campcodes Online Job Finder System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/e… |
CVE-2024-2668 | Medium | 6.3 | 2024-03-20 | A vulnerability has been found in Campcodes Online Job Finder System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin… |
CVE-2024-2387 | Medium | 6.1 | 2024-03-20 | The Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms plugin for WordPress is vulnerable to SQL Injection… |
CVE-2024-2649 | Medium | 6.3 | 2024-03-20 | A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this vulnerability is an unknown fu… |
CVE-2024-2647 | High | 7.3 | 2024-03-19 | A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3. This issue affects some unknown process… |
CVE-2024-2646 | Medium | 6.3 | 2024-03-19 | A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /vpn… |
CVE-2024-2644 | Medium | 6.3 | 2024-03-19 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functiona… |
CVE-2024-28389 | Critical | 9.8 | 2024-03-19 | SQL injection vulnerability in KnowBand spinwheel v.3.0.3 and before allows a remote attacker to gain escalated privileges and obtain sensitive information via… |
CVE-2024-28595 | Critical | 9.8 | 2024-03-19 | SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the admin_id parameter in update-admin.php. |
CVE-2024-28303 | Critical | 9.8 | 2024-03-19 | Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/index.php. |
CVE-2023-44091 | High | 7.5 | 2024-03-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. This ulnerabilit… |
CVE-2023-44090 | Medium | 6.8 | 2024-03-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows CVE-2008-5817. This vulnerabil… |
CVE-2024-2622 | Medium | 6.3 | 2024-03-19 | A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318. It has been classified as critical. This affects an unk… |
CVE-2024-2621 | Medium | 6.3 | 2024-03-19 | A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected by this issue is so… |
CVE-2024-2620 | Medium | 6.3 | 2024-03-19 | A vulnerability has been found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected by this vulner… |
CVE-2024-0365 | Medium | 6.5 | 2024-03-18 | The Fancy Product Designer WordPress plugin before 6.1.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL… |
CVE-2024-27096 | High | 7.7 | 2024-03-18 | GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authenticated u… |
CVE-2024-2592 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/person/pic_show.php, in the 'person_id' parameter. This vulnerability… |
CVE-2024-2591 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_group.php, in multiple parameters. This vulnerabi… |
CVE-2024-2590 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/mail/main/select_send.php, in the 'sd_index' parameter. This vulnerabi… |
CVE-2024-2589 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_school_person.php, in multiple parameters. This v… |
CVE-2024-2588 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/admin/index.php, in the 'id' parameter. This vulnerability could allow a remot… |
CVE-2024-2587 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_khet_person.php, in multiple parameters. This vul… |
CVE-2024-2586 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/index.php, in the 'username' parameter. This vulnerability could allow a remot… |
CVE-2024-2585 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send_2.php, in the 'sd_index' parameter. This vulnera… |
CVE-2024-2584 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send.php, in the 'sd_index' parameter. This vulnerabi… |
CVE-2024-2568 | Medium | 4.7 | 2024-03-17 | A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /a… |
CVE-2024-2566 | High | 7.3 | 2024-03-17 | A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240313. It has been declared as critical. Affected by this vuln… |
CVE-2024-2562 | Medium | 6.3 | 2024-03-17 | A vulnerability, which was classified as critical, was found in PandaXGO PandaX up to 20240310. This affects the function InsertRole of the file /apps/system/s… |
CVE-2024-2556 | Medium | 6.3 | 2024-03-17 | A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file a… |
CVE-2024-2555 | Medium | 6.3 | 2024-03-17 | A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionalit… |
CVE-2024-2554 | Medium | 6.3 | 2024-03-17 | A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown f… |
CVE-2024-2534 | Medium | 6.3 | 2024-03-17 | A vulnerability, which was classified as critical, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of th… |
CVE-2024-2532 | Medium | 6.3 | 2024-03-16 | A vulnerability classified as critical was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this vulnerability is an unknown f… |
CVE-2024-2528 | Medium | 6.3 | 2024-03-16 | A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been classified as critical. This affects an unknown part of t… |
CVE-2024-2527 | Medium | 6.3 | 2024-03-16 | A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as critical. Affected by this issue is some unknown fun… |
CVE-2024-2524 | Medium | 6.3 | 2024-03-16 | A vulnerability, which was classified as critical, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This issue affects some unkno… |
CVE-2024-2522 | Medium | 6.3 | 2024-03-16 | A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of the file… |
CVE-2024-2520 | Medium | 6.3 | 2024-03-16 | A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been declared as critical. Affected by this vulnerability is a… |
CVE-2024-2517 | Medium | 6.3 | 2024-03-16 | A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as critical. This vulnerability affects unknown co… |
CVE-2024-2516 | Medium | 6.3 | 2024-03-16 | A vulnerability, which was classified as critical, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of th… |
CVE-2024-2514 | High | 7.3 | 2024-03-15 | A vulnerability classified as critical was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this vulnerability is an unknown f… |
CVE-2024-1795 | High | 8.8 | 2024-03-15 | The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to SQL Injection via the 'name' parameter in the woof shortcode in… |
CVE-2024-2480 | Medium | 6.3 | 2024-03-15 | A vulnerability classified as critical was found in MHA Sistemas arMHAzena 9.6.0.0. This vulnerability affects unknown code of the component Executa Page. The… |
CVE-2024-2478 | Medium | 6.3 | 2024-03-15 | A vulnerability was found in BradWenqiang HR 2.0. It has been rated as critical. Affected by this issue is the function selectAll of the file /bishe/register o… |
CVE-2024-25227 | Critical | 9.8 | 2024-03-15 | SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), escalate privileges, an… |
CVE-2024-28323 | Medium | 6.5 | 2024-03-14 | The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a potential security vulnerability related t… |
CVE-2024-28388 | Critical | 9.8 | 2024-03-14 | SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain… |
CVE-2024-25250 | Critical | 9.8 | 2024-03-13 | SQL Injection vulnerability in code-projects Agro-School Management System 1.0 allows attackers to run arbitrary code via the Login page. |
CVE-2024-24105 | High | 7.8 | 2024-03-13 | SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary code via adminFormvalidation.php. |
CVE-2023-41504 | High | 8.8 | 2024-03-13 | SQL Injection vulnerability in Student Enrollment In PHP 1.0 allows attackers to run arbitrary code via the Student Search function. |
CVE-2024-2418 | Medium | 6.3 | 2024-03-13 | A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown func… |
CVE-2024-1793 | High | 7.2 | 2024-03-13 | The AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth plugin for WordPress is vulnerable to SQL Inject… |
CVE-2024-1751 | High | 8.8 | 2024-03-13 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection via the question_id parameter in all versio… |
CVE-2024-1203 | High | 8.8 | 2024-03-13 | The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to SQL Injection via the… |
CVE-2024-1071 | Critical | 9.8 | 2024-03-13 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to SQL In… |
CVE-2023-5663 | High | 8.8 | 2024-03-13 | The News Announcement Scroll plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0.0 due to insu… |
CVE-2024-24101 | Critical | 9.8 | 2024-03-12 | Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update. |
CVE-2024-24093 | Critical | 9.8 | 2024-03-12 | SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information. |
CVE-2024-24092 | High | 7.8 | 2024-03-12 | SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via login.php. |
CVE-2024-1301 | Critical | 9.8 | 2024-03-12 | SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier. A remote attacker could send a specially crafted SQL query to the se… |
CVE-2023-48788 | Critical | 9.8 | 2024-03-12 | A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7… |
CVE-2024-2393 | Medium | 6.3 | 2024-03-12 | A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functi… |
CVE-2024-25325 | High | 7.1 | 2024-03-12 | SQL injection vulnerability in Employee Management System v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to the txtemail p… |
CVE-2024-1068 | High | 7.2 | 2024-03-11 | The 404 Solution WordPress plugin before 2.35.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injectio… |
CVE-2024-28816 | High | 7.1 | 2024-03-11 | Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php. |
CVE-2024-2351 | Medium | 6.3 | 2024-03-09 | A vulnerability classified as critical was found in CodeAstro Ecommerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file action… |
CVE-2024-2333 | Medium | 6.3 | 2024-03-09 | A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unknown function of the file /add_members.p… |
CVE-2024-2332 | Medium | 6.3 | 2024-03-09 | A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. This issue affects some unknown processing of th… |
CVE-2024-2330 | Medium | 6.3 | 2024-03-09 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /p… |
CVE-2024-2329 | Medium | 6.3 | 2024-03-09 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2024-2338 | High | 8.0 | 2024-03-08 | PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled… |
CVE-2024-21901 | Medium | 4.7 | 2024-03-08 | A SQL injection vulnerability has been reported to affect myQNAPcloud. If exploited, the vulnerability could allow authenticated administrators to inject malic… |