Total
16215 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-2593 | 1 Xjd2020 | 1 Fastcms | 2025-04-01 | 6.5 MEDIUM | 6.3 MEDIUM |
| A vulnerability has been found in FastCMS up to 0.1.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/client/article/list. The manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. | |||||
| CVE-2024-30238 | 1 Contest-gallery | 1 Contest Gallery | 2025-04-01 | N/A | 8.5 HIGH |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 21.3.2. | |||||
| CVE-2024-29301 | 1 Mayurik | 1 Php Task Management System | 2025-04-01 | N/A | 7.5 HIGH |
| SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-admin.php?admin_id= | |||||
| CVE-2024-29302 | 1 Mayurik | 1 Php Task Management System | 2025-04-01 | N/A | 7.5 HIGH |
| SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php. | |||||
| CVE-2024-29303 | 1 Mayurik | 1 Php Task Management System | 2025-04-01 | N/A | 9.8 CRITICAL |
| The delete admin users function of SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection | |||||
| CVE-2022-38867 | 1 Rttys Project | 1 Rttys | 2025-04-01 | N/A | 8.8 HIGH |
| SQL Injection vulnerability in rttys versions 4.0.0, 4.0.1, 4.0.2, and 4.4.x in api.go, allows attackers to execute arbitrary code. | |||||
| CVE-2025-2740 | 1 Phpgurukul | 1 Old Age Home Management System | 2025-04-01 | 7.5 HIGH | 7.3 HIGH |
| A vulnerability classified as critical has been found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/eligibility.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. | |||||
| CVE-2024-28323 | 1 Phpgurukul | 1 User Registration \& Login And User Management System | 2025-04-01 | N/A | 6.5 MEDIUM |
| The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a potential security vulnerability related to user input validation. The script retrieves user-provided date inputs without proper validation, making it susceptible to SQL injection attacks. | |||||
| CVE-2022-46999 | 1 Tuzicms | 1 Tuzicms | 2025-04-01 | N/A | 9.8 CRITICAL |
| Tuzicms v2.0.6 was discovered to contain a SQL injection vulnerability via the component \App\Manage\Controller\UserController.class.php. | |||||
| CVE-2025-22783 | 1 Squirrly | 1 Seo Plugin By Squirrly Seo | 2025-04-01 | N/A | 8.5 HIGH |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SEO Squirrly SEO Plugin by Squirrly SEO allows SQL Injection.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.4.03. | |||||
| CVE-2025-2852 | 1 Oretnom23 | 1 Food Ordering Management System | 2025-04-01 | 5.8 MEDIUM | 4.7 MEDIUM |
| A vulnerability has been found in SourceCodester Food Ordering Management System up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/menus/view_menu.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. | |||||
| CVE-2024-1784 | 1 Limbas | 1 Limbas | 2025-04-01 | 3.7 LOW | 3.9 LOW |
| A vulnerability classified as problematic was found in Limbas 5.2.14. Affected by this vulnerability is an unknown functionality of the file main_admin.php. The manipulation of the argument tab_group leads to sql injection. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254575. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. | |||||
| CVE-2024-25866 | 1 Codeastro | 1 Membership Management System | 2025-04-01 | N/A | 8.8 HIGH |
| A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the email parameter in the index.php component. | |||||
| CVE-2024-25867 | 1 Codeastro | 1 Membership Management System | 2025-04-01 | N/A | 9.1 CRITICAL |
| A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the membershipType and membershipAmount parameters in the add_type.php component. | |||||
| CVE-2020-22452 | 1 Phpmyadmin | 1 Phpmyadmin | 2025-04-01 | N/A | 9.8 CRITICAL |
| SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php. | |||||
| CVE-2024-51065 | 1 Phpgurukul | 1 Beauty Parlour Management System | 2025-03-31 | N/A | 9.8 CRITICAL |
| Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter. | |||||
| CVE-2024-51064 | 1 Phpgurukul | 1 Teachers Record Management System | 2025-03-31 | N/A | 9.8 CRITICAL |
| Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection via the tid parameter to admin/queries.php. | |||||
| CVE-2024-51063 | 1 Phpgurukul | 1 Teachers Record Management System | 2025-03-31 | N/A | 9.1 CRITICAL |
| Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter. | |||||
| CVE-2024-46472 | 1 Codeastro | 1 Membership Management System | 2025-03-31 | N/A | 8.6 HIGH |
| CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page. | |||||
| CVE-2022-44297 | 1 Sscms | 1 Siteserver Cms | 2025-03-31 | N/A | 9.8 CRITICAL |
| SiteServer CMS 7.1.3 has a SQL injection vulnerability the background. | |||||