CWE:
 

Tytuł
Data
Autor
Med.
SmartAgent 1.1.0 SQL Injection
02.11.2024
Alter Prime
Med.
LifterLMS - Blind SQL Injection
25.10.2024
FURKAN KARAARSLAN
Med.
VICIdial 2.14-917a SQL Injection
13.10.2024
Jaggar Henry
Med.
WordPress LMS 4.2.7 SQL Injection
13.10.2024
Avento
Med.
Netman 204 4.05 SQL Injection / Unauthenticated Password Reset
13.10.2024
T. Weber
Med.
PHP-Nuke Top Module SQL Injection
08.10.2024
Emiliano Febbi
High
MD-Pro 1.0.76 Shell Upload / SQL Injection
05.10.2024
Emiliano Febbi
Med.
C-MOR Video Surveillance 5.2401 / 6.00PL01 SQL Injection
10.09.2024
Matthias Deeg
Med.
VICIdial Multiple Authenticated SQL Injection
03.09.2024
h00die
Med.
Dolphin 7.4.2 Blind SQL Injection
08.08.2024
Andrey Stoykov
Med.
WordPress PayPlus Payment Gateway SQL Injection
08.08.2024
j3r1ch0123
Med.
ReadyMade Unilevel Ecommerce MLM Blind SQL Injection / Cross Site Scripting
03.08.2024
OoN_Boy
Med.
Leads Manager Tool SQL Injection / Cross Site Scripting
03.08.2024
OoN_Boy
Med.
Hospital Management System Project In ASP.Net MVC 1 SQL Injection
17.07.2024
0xMykull
Med.
WordPress Poll Maker 5.3.2 SQL Injection
11.07.2024
tmrswrr
Med.
WordPress Poll 2.3.6 SQL Injection
09.07.2024
tmrswrr
Med.
Ivanti EPM RecordGoodApp SQL Injection / Remote Code Execution
09.07.2024
Christophe de la Fuent...
Med.
WordPress Video Gallery - YouTube Gallery And Vimeo Gallery 2.3.6 SQL Injection
06.07.2024
tmrswrr
Med.
Xhibiter NFT Marketplace 1.10.2 SQL Injection
02.07.2024
Sohel yousef
Med.
Carbon Forum 5.9.0 Cross Site Request Forgery / SQL Injection
24.06.2024
bRpsd
Med.
AEGON LIFE 1.0 SQL Injection
15.06.2024
Aslam Anwar Mahimkar
Med.
FengOffice 3.11.1.2 SQL Injection
10.06.2024
Andrey Stoykov
Med.
Online Fire Reporting System OFRS SQL Injection Authentication Bypass
07.06.2024
Diyar Saadi
Med.
Boelter Blue System Management 1.3 SQL Injection
07.06.2024
CBKB
Med.
Online Pizza Ordering System 1.0 SQL Injection
07.06.2024
nu11secur1ty
Med.
BWL Advanced FAQ Manager 2.0.3 SQL Injection
02.06.2024
Ivan Spiridonov
Med.
WordPress XStore Theme 9.3.8 SQL Injection
22.05.2024
Abdualhadi Khalifa
Med.
Chat Bot 1.0 SQL Injection
22.05.2024
nu11secur1ty
Med.
Tenant Limited 1.0 SQL Injection
20.05.2024
nu11secur1ty
Med.
Prison Management System SQL Injection Authentication Bypass
13.05.2024
Sanjay Singh
Med.
SOPlanning 1.52.00 SQL Injection
04.05.2024
liquidsky
Med.
FortiNet FortiClient EMS 7.2.2 / 7.0.10 SQL Injection / Remote Code Execution
25.04.2024
Spencer McIntyre
Med.
Centreon 23.10-1.el8 SQL Injection
16.04.2024
Cody Sixteen
Med.
AMPLE BILLS 0.1 SQL injection
15.04.2024
nu11secur1ty
Med.
Moodle 3.10.1 SQL Injection
15.04.2024
Julio Ángel Ferrari
Med.
UP-RESULT 0.1 2024 SQL Injection
08.04.2024
nu11secur1ty
Med.
Daily Expense Manager 1.0 SQL Injection
08.04.2024
Stefan Hesselman
Med.
Human Resource Management System 2024 1.0 SQL Injection
06.04.2024
nu11secur1ty
Med.
Purei CMS 1.0 SQL Injection
30.03.2024
Number 7
Med.
MobileShop master - SQL Injection Vuln.
26.03.2024
HAZIM ARBAŞ
Med.
CSZCMS v1.3.0 SQL Injection (Authenticated)
20.03.2024
Abdulaziz Almetairy
Med.
Human Resource Management System 1.0 SQL Injection
13.03.2024
Srikar
Med.
WordPress Hide My WP SQL Injection
11.03.2024
Xenofon Vassilakopoulo...
Med.
Enrollment System v1.0 SQL Injection
03.03.2024
Gnanaraj Mauviel
Med.
Membership Management System 1.0 SQL Injection
01.03.2024
SoSPiro
Med.
WP Fastest Cache 1.2.2 Unauthenticated SQL Injection
29.02.2024
Meryem Taşkın
Med.
Blood Bank 1.0 SQL Injection
28.02.2024
Ersin Erenler
Med.
WordPress WP Fastest Cache 1.2.2 SQL Injection
28.02.2024
Meryem Taskin
Med.
Simple Inventory Management System v1.0 email SQL Injection
27.02.2024
SoSPiro
Med.
Fuelflow 1.0 SQL Injection
25.02.2024
nu11secur1ty
Med.
Cacti pollers.php SQL Injection / Remote Code Execution
07.02.2024
Christophe de la Fuent...
Med.
Bank Locker Management System SQL Injection
02.02.2024
SoSPiro
High
xbtitFM 4.1.18 SQL Injection / Shell Upload / Traversal
22.01.2024
Who cares anyway
Med.
WordPress RSVPMaker 9.3.2 SQL Injection
17.01.2024
Amirhossein Bahramizad...
Med.
Copyright Loan Management System 2024 1.0 SQL Injection
13.01.2024
nu11secur1ty
Med.
AdvantechWeb/SCADA 9.1.5U SQL Injection
10.01.2024
Cody Sixteen
High
Hospital Management System 4.0 XSS / Shell Upload / SQL Injection
24.12.2023
Louise Ng
Med.
GilaCMS 1.15.4 SQL Injection
24.12.2023
Louise Ng
Low
Webnink - sql injection Vulnerability
08.11.2023
nabeghehtech
Med.
WordPress AI ChatBot 4.8.9 SQL Injection / Traversal / File Deletion
27.10.2023
Marco Wotschka
Med.
NLB mKlik Makedonija 3.3.12 SQL Injection
16.10.2023
Neurogenesia
Med.
WordPress WP ERP 1.12.2 SQL Injection
16.10.2023
Arvandy
Med.
ChurchCRM 4.5.4 SQL Injection
16.10.2023
Arvandy
Med.
Dawa Pharma 1.0-2022 SQL Injection
14.10.2023
nu11secur1ty
Med.
Smart School 6.4.1 SQL Injection
11.10.2023
CraCkEr
Med.
Academy LMS 6.2 SQL Injection
20.09.2023
CraCkEr
Med.
Taskhub 2.8.7 SQL Injection
20.09.2023
CraCkEr
Med.
WordPress Slimstat Analytics 5.0.9 Cross Site Scripting / SQL Injection
13.09.2023
Lana Codes
Med.
Shuttle Booking Software 1.0 SQL Injection
13.09.2023
nu11secur1ty
Med.
Equipment Rental Script 1.0 SQL Injection
13.09.2023
nu11secur1ty
Med.
Meeting Room Booking System 1.0 SQL Injection
10.09.2023
nu11secur1ty
High
Online ID Generator 1.0 SQL Injection / Shell Upload
31.08.2023
nu11secur1ty
Med.
Business Directory Script 3.2 SQL Injection
26.08.2023
nu11secur1ty
Med.
User Registration And Login And User Management System 3.0 SQL Injection
24.08.2023
Ashutosh Singh Umath
Med.
Global Multi School Management System Express 1.0 SQL Injection
23.08.2023
Ahmet Umit Bayram
Med.
Color Prediction Game 1.0 SQL Injection
23.08.2023
Ahmet Umit Bayram
Med.
OVOO Movie Portal CMS 3.3.3 SQL Injection
23.08.2023
Ahmet Umit Bayram
Med.
Online Diagnostic Lab Management 1.0 SQL Injection
01.08.2023
nu11secur1ty
Med.
Hikvision Hybrid SAN Ds-a71024 SQL Injection
21.07.2023
Thurein Soe
Med.
Faculty Evaluation System v1.0 SQL Injection
21.07.2023
Andrey Stoykov
Med.
Wifi Soft Unibox Administration 3.0 / 3.1 SQL Injection
21.07.2023
Ansh Jain
Med.
CMS SAUDI SOFTECH 5.0.2 SQL Injection
21.07.2023
indoushka
Med.
Groomify v1.0 SQL Injection
06.07.2023
Ahmet Ümit BAYRAM
Med.
WordPress WP AutoComplete Search 1.0.4 SQL Injection
05.07.2023
Matin Nouriyan
Med.
Beauty Salon Management System 1.0 SQL Injection
05.07.2023
Fatih Nacar
Med.
SPIP 4.2.3 SQL Injection
30.06.2023
nu11secur1ty
Med.
MOVEit SQL Injection
25.06.2023
bwatters-r7
Med.
SCRMS 2023-05-27 1.0 Multiple SQL Injection
22.06.2023
nu11secur1ty
Med.
ACJWEB DESIGNER 1.0 SQL Injection
22.06.2023
indoushka
Med.
Expert Job Portal Management System 1.0 SQL Injection
07.06.2023
CraCkEr
Med.
PrinterLogic Build 1.0.757 XSS / SQL Injection / Authentication Bypass
30.05.2023
Nadeem Salim
Med.
Stackposts Social Marketing Tool v1.0 SQL Injection
27.05.2023
Ahmet Ümit BAYRAM
Med.
Quicklancer v1.0 SQL Injection
27.05.2023
Ahmet Ümit BAYRAM
Med.
Smart School 1.0 SQL Injection
24.05.2023
Ahmet Umit Bayram
Med.
LeadPro CRM 1.0 SQL Injection
24.05.2023
Ahmet Umit Bayram
Med.
Service Provider Management System v1.0 SQL Injection
24.05.2023
Ashik Kunjumon
Med.
GaanaGawaana Music Platform PHP Script 1.0 Cross Site Scripting / SQL Injection
21.05.2023
nu11secur1ty
Med.
GaanaGawaana 1.0 SQL Injection
11.05.2023
CraCkEr
Med.
VOTAB Voting Quiz PHP Script 1.0 SQL Injection
10.05.2023
CraCkEr
Med.
Found Information System 1.0 SQL Injection
08.05.2023
nu11secur1ty

Common Weakness Enumeration (CWE)

CVE
Szczegóły
Opis
2024-10-21
Waiting for details
CVE-2024-10196
Updating...
 
 
A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /add_new_invoice.php. The manipulation of the argument text leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

 
Waiting for details
CVE-2024-47328
Updating...
 
 
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Automation By Autonami allows SQL Injection.This issue affects Automation By Autonami: from n/a through 3.1.2.

 
2024-10-20
Waiting for details
CVE-2024-10170
Updating...
 
 
A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. This issue affects some unknown processing of the file get_doctor.php. The manipulation of the argument specilizationid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

 
Waiting for details
CVE-2024-10169
Updating...
 
 
A vulnerability classified as critical was found in code-projects Hospital Management System 1.0. This vulnerability affects unknown code of the file change-password.php. The manipulation of the argument cpass leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

 
Waiting for details
CVE-2024-10167
Updating...
 
 
A vulnerability classified as critical has been found in Codezips Sales Management System 1.0. This affects an unknown part of the file deletecustind.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

 
Waiting for details
CVE-2024-10166
Updating...
 
 
A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file checkuser.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

 
Waiting for details
CVE-2024-10165
Updating...
 
 
A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file deletecustcom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

 
Waiting for details
CVE-2024-10163
Updating...
 
 
A vulnerability was found in SourceCodester Sentiment Based Movie Rating System 1.0. It has been classified as critical. Affected is an unknown function of the file /msrps/movie_details.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher disclosure mentions a slightly changed product name.

 
Waiting for details
CVE-2024-10162
Updating...
 
 
A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-subadmin.php of the component Edit Subdomain Details Page. The manipulation of the argument sadminusername/fullname/emailid/mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "mobilenumber" to be affected. But it must be assumed that other parameters are affected as well.

 
Waiting for details
CVE-2024-10160
Updating...
 
 
A vulnerability, which was classified as critical, has been found in PHPGurukul Boat Booking System 1.0. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php of the component BW Dates Report Page. The manipulation of the argument fdate/tdate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "fdate" to be affected. But it must be assumed "tdate" is affected as well.

 

 

Copyright 2024, cxsecurity.com

 

Back to Top