Fallos del tipo CWE-89

11.837 resultados
CVE-2025-54060CRITICALWeGIA SQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarInfoPessoal.php EndpointEPSS 0.5%CVE-2025-26163CRITICALCM Soluces Informatica Ltda Auto Atendimento 1.x.x was discovered to contain a SQL injection via the CPF parameter.EPSS 0.5%CVE-2024-57162HIGHCampcodes Cybercafe Management System v1.0 is vulnerable to SQL Injection in /ccms/view-user-detail.php.EPSS 0.5%CVE-2024-3200CRITICALwpForo Forum <= 2.3.3 - Authenticated (Contributor+) SQL InjectionEPSS 0.5%CVE-2024-41802HIGHXibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Data ImportEPSS 0.5%CVE-2024-4743HIGHLifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via ShortcodeEPSS 0.5%CVE-2025-53091CRITICALWeGIA has Unauthenticated Time-Based Blind SQL Injection in almox ParameterEPSS 0.5%CVE-2024-31507HIGHSourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "request" parameter in admin/fetch_gendercs.php.EPSS 0.5%CVE-2026-27461MEDIUMPimcore vulnerable to SQL injection via unsanitized filter value in Dependency Dao RLIKE clauseEPSS 0.5%CVE-2025-4559CRITICALNetvision ISOinsight - SQL InjectionEPSS 0.5%CVE-2026-1121MEDIUMYonyou KSOA HTTP GET Parameter del_workplan.jsp sql injectionEPSS 0.5%CVE-2023-0673MEDIUMSourceCodester Online Eyewear Shop sql injectionEPSS 0.5%CVE-2025-45020HIGHA SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System vEPSS 0.5%CVE-2025-26605CRITICALSQL Injection endpoint 'deletar_cargo.php' parameter 'id_cargo' in WeGIAEPSS 0.5%CVE-2026-39948CRITICALCacti has SQL Injection via rfilter parameter in RLIKE clausesEPSS 0.5%CVE-2025-1840MEDIUMESAFENET CDG updateorg.jsp sql injectionEPSS 0.5%CVE-2024-40540MEDIUMmy-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept.EPSS 0.5%CVE-2024-51672HIGHWordPress BetterLinks plugin <= 2.1.7 - SQL Injection vulnerabilityEPSS 0.5%CVE-2025-4483MEDIUMitsourcecode Gym Management System view_pdetails.php sql injectionEPSS 0.5%CVE-2025-4481MEDIUMSourceCodester Apartment Visitor Management System search-result.php sql injectionEPSS 0.5%