Fallos del tipo CWE-89

11.716 resultados
CVE-2022-33880CRITICALhms-staff.php in Projectworlds Hospital Management System Mini-Project through 2018-06-17 allows SQL injection via the type parameter.EPSS 0.7%CVE-2024-2804CRITICALNetwork Summary <= 2.0.11 - Unauthenticated SQL InjectionEPSS 0.7%CVE-2021-38239HIGHSQL Injection vulnerability in dataease before 1.2.0, allows attackers to gain sensitive information via the orders parameter to /api/sys_msEPSS 0.7%CVE-2023-34603HIGHJeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.moduEPSS 0.7%CVE-2024-36039MEDIUMPyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.EPSS 0.7%CVE-2024-13006MEDIUM1000 Projects Human Resource Management System employeeview.php sql injectionEPSS 0.7%CVE-2021-4301MEDIUMslackero phpwcms sql injectionEPSS 0.7%CVE-2020-3378MEDIUMCisco SD-WAN vManage Software SQL Injection VulnerabilityEPSS 0.7%CVE-2015-10084MEDIUMirontec klear-library BaseController.php _prepareWhere sql injectionEPSS 0.7%CVE-2022-2722MEDIUMSourceCodester Simple Student Information System manage_course.php sql injectionEPSS 0.7%CVE-2022-2644MEDIUMSourceCodester Online Admission System GET Parameter sql injectionEPSS 0.7%CVE-2022-2715MEDIUMSourceCodester Employee Management System eloginwel.php sql injectionEPSS 0.7%CVE-2022-2648MEDIUMSourceCodester Multi Language Hotel Management Software sql injectionEPSS 0.7%CVE-2024-25217HIGHOnline Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/view_EPSS 0.7%CVE-2023-5281MEDIUMSourceCodester Engineers Online Portal remove_inbox_message.php sql injectionEPSS 0.7%CVE-2023-4449MEDIUMSourceCodester Free and Open Source Inventory Management System sql injectionEPSS 0.7%CVE-2022-2643MEDIUMSourceCodester Online Admission System POST Parameter sql injectionEPSS 0.7%CVE-2023-25960CRITICALWordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to SQL InjectionEPSS 0.7%CVE-2024-7279MEDIUMSourceCodester Lot Reservation Management System sql injectionEPSS 0.7%CVE-2023-25800HIGHWordPress Tutor LMS Plugin <= 2.2.0 is vulnerable to SQL InjectionEPSS 0.7%