Weaknesses of type CWE-89
11,812 resultsCVE-2026-7797HIGHAppointment Booking Calendar <= 1.6.11.8 - Unauthenticated SQL Injection via 'append_where_sql' ParameterEPSS 0.6%CVE-2025-1956MEDIUMcode-projects Shopping Portal Login index.php sql injectionEPSS 0.6%CVE-2025-32857HIGHA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injEPSS 0.6%CVE-2023-28748HIGHWordPress Copy Or Move Comments Plugin <= 5.0.4 is vulnerable to SQL InjectionEPSS 0.6%CVE-2025-1856MEDIUMCodezips Gym Management System gen_invoice.php sql injectionEPSS 0.6%CVE-2023-52215CRITICALWordPress Barcode Scanner with Inventory & Order Manager Plugin <=1.5.1 is vulnerable to SQL InjectionEPSS 0.6%CVE-2024-11817MEDIUMPHPGurukul User Registration & Login and User Management System index.php sql injectionEPSS 0.6%CVE-2024-13092MEDIUMcode-projects Job Recruitment Job Post search_ajax.php sql injectionEPSS 0.6%CVE-2025-22783HIGHWordPress SEO Plugin by Squirrly SEO plugin <= 12.4.03 - SQL Injection vulnerabilityEPSS 0.6%CVE-2024-12935MEDIUMcode-projects Simple Admin Panel editItemForm.php sql injectionEPSS 0.6%CVE-2024-13093MEDIUMcode-projects Job Recruitment Seeker Profile _call_main_search_ajax.php sql injectionEPSS 0.6%CVE-2024-11260HIGHEvents Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status ParameterEPSS 0.6%CVE-2026-26703CRITICALsourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advance_search.php.EPSS 0.6%CVE-2024-12936MEDIUMcode-projects Simple Admin Panel catDeleteController.php sql injectionEPSS 0.6%CVE-2025-26390CRITICALA vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). The web service of affected devices is vuEPSS 0.6%CVE-2023-7099MEDIUMPHPGurukul Nipah Virus Testing Management System bwdates-report-result.php sql injectionEPSS 0.6%CVE-2026-26702CRITICALsourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/myitem_reuse.php.EPSS 0.6%CVE-2025-67146CRITICALMultiple SQL Injection vulnerabilities exist in AbhishekMali21 GYM-MANAGEMENT-SYSTEM 1.0 via the 'name' parameter in (1) member_search.php, EPSS 0.6%CVE-2024-13039MEDIUMcode-projects Simple Chat System add_user.php sql injectionEPSS 0.6%CVE-2023-0686MEDIUMSourceCodester Online Eyewear Shop HTTP POST Request update_cart sql injectionEPSS 0.6%