Vulnerabilities (CVE)

Filtered by CWE-89
Total 15484 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-38272 1 Jflyfox 1 Jfinal Cms 2024-11-21 N/A 7.2 HIGH
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list.
CVE-2022-38269 1 School Activity Updates With Sms Notification Project 1 School Activity Updates With Sms Notification 2024-11-21 N/A 7.2 HIGH
School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/modstudent/index.php?view=edit&id=.
CVE-2022-38268 1 School Activity Updates With Sms Notification Project 1 School Activity Updates With Sms Notification 2024-11-21 N/A 7.2 HIGH
School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/autonumber/index.php?view=edit&id=.
CVE-2022-38267 1 School Activity Updates With Sms Notification Project 1 School Activity Updates With Sms Notification 2024-11-21 N/A 7.2 HIGH
School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/user/index.php?view=edit&id=.
CVE-2022-38265 1 Apartment Visitor Management System Project 1 Apartment Visitor Management System 2024-11-21 N/A 7.2 HIGH
Apartment Visitor Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /avms/edit-apartment.php.
CVE-2022-38260 1 Interview Management System Project 1 Interview Management System 2024-11-21 N/A 7.2 HIGH
Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=questiondelete&id=.
CVE-2022-38255 1 Interview Management System Project 1 Interview Management System 2024-11-21 N/A 7.2 HIGH
Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /interview/editQuestion.php.
CVE-2022-38250 1 Nagios 1 Nagios Xi 2024-11-21 N/A 9.8 CRITICAL
Nagios XI v5.8.6 was discovered to contain a SQL injection vulnerability via the mib_name parameter at the Manage MIBs page.
CVE-2022-38130 1 Keysight 1 Sensor Management Server 2024-11-21 N/A 9.8 CRITICAL
The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file (i.e., \\<attacker-host>\sms\<attacker-db.zip>), effectively controlling the content of the database to be restored.
CVE-2022-38118 1 Hgiga 1 Oaklouds Portal 2024-11-21 N/A 8.8 HIGH
OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service.
CVE-2022-38074 1 Veronalabs 1 Wp Statistics 2024-11-21 N/A 9.9 CRITICAL
SQL Injection vulnerability in VeronaLabs WP Statistics plugin <= 13.2.10 versions.
CVE-2022-37794 1 Library Management System Project 1 Library Management System 2024-11-21 N/A 9.8 CRITICAL
In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection.
CVE-2022-37333 1 Exceedone 2 Exment, Laravel-admin 2024-11-21 N/A 8.8 HIGH
SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows remote authenticated attackers to execute arbitrary SQL commands.
CVE-2022-37223 1 Jflyfox 1 Jfinal Cms 2024-11-21 N/A 9.8 CRITICAL
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.
CVE-2022-37207 1 Jflyfox 1 Jfinal Cms 2024-11-21 N/A 8.8 HIGH
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection
CVE-2022-37203 1 Jflyfox 1 Jfinal Cms 2024-11-21 N/A 9.8 CRITICAL
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
CVE-2022-37201 1 Jflyfox 1 Jfinal Cms 2024-11-21 N/A 8.8 HIGH
JFinal CMS 5.1.0 is vulnerable to SQL Injection.
CVE-2022-37199 1 Jflyfox 1 Jfinal Cms 2024-11-21 N/A 9.8 CRITICAL
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.
CVE-2022-37185 1 Ems Project 1 Ems 2024-11-21 N/A 7.5 HIGH
SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the Thai Basic Education Commission, which can lead to data leakage.
CVE-2022-37178 1 72crm 1 Wukong Crm 2024-11-21 N/A 8.8 HIGH
An issue was discovered in 72crm 9.0. There is a SQL Injection vulnerability in View the task calendar.