Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by CWE-89
Total 9311 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-41932 1 Wolterskluwer 1 Teammate\+ Audit 2022-06-13 6.5 MEDIUM 8.8 HIGH
A blind SQL injection vulnerability in search form in TeamMate+ Audit version 28.0.19.0 allows any authenticated user to create malicious SQL injections, which can result in complete database compromise, gaining information about other users, unauthorized access to audit data etc.
CVE-2022-30599 3 Fedoraproject, Moodle, Redhat 3 Fedora, Moodle, Enterprise Linux 2022-06-13 7.5 HIGH 9.8 CRITICAL
A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria.
CVE-2020-36541 1 Demokratian 1 Demokratian 2022-06-10 7.5 HIGH 9.8 CRITICAL
A vulnerability was found in Demokratian. It has been rated as critical. Affected by this issue is some unknown functionality of the file basicos_php/genera_select.php. The manipulation of the argument id_provincia with the input -1%20union%20all%20select%201,2,3,4,database() leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
CVE-2020-36540 1 Neetai 1 Neetai Tech 2022-06-10 7.5 HIGH 9.8 CRITICAL
A vulnerability, which was classified as critical, was found in Neetai Tech. Affected is an unknown function of the file /product.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2020-36539 1 Logicoycreativo 1 Logico Y Creativo 2022-06-10 7.5 HIGH 9.8 CRITICAL
A vulnerability was found in Lógico y Creativo 1.0 and classified as critical. This issue affects some unknown processing. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely.
CVE-2022-29704 1 Browsbox 1 Brows Box 2022-06-10 7.5 HIGH 9.8 CRITICAL
BrowsBox CMS v4.0 was discovered to contain a SQL injection vulnerability.
CVE-2022-30799 1 Online Ordering System Project 1 Online Ordering System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php.
CVE-2022-30798 1 Online Ordering System Project 1 Online Ordering System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php.
CVE-2022-30797 1 Online Ordering System Project 1 Online Ordering System 2022-06-10 7.5 HIGH 9.8 CRITICAL
Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php.
CVE-2022-30795 1 Online Ordering System Project 1 Online Ordering System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php.
CVE-2022-30794 1 Online Ordering System Project 1 Online Ordering System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php.
CVE-2022-30512 1 School Dormitory Management System Project 1 School Dormitory Management System 2022-06-10 7.5 HIGH 9.8 CRITICAL
School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/payment_history.php:31.
CVE-2022-30496 1 Mv 1 Idce 2022-06-10 5.0 MEDIUM 7.5 HIGH
SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to access enterprise's private and sensitive information.
CVE-2022-30511 1 School Dormitory Management System Project 1 School Dormitory Management System 2022-06-10 7.5 HIGH 9.8 CRITICAL
School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/view_details.php:4.
CVE-2022-30510 1 School Dormitory Management System Project 1 School Dormitory Management System 2022-06-10 7.5 HIGH 9.8 CRITICAL
School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/daily_collection_report.php:59.
CVE-2022-32026 1 Car Rental Management System Project 1 Car Rental Management System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_booking.php?id=.
CVE-2022-32021 1 Car Rental Management System Project 1 Car Rental Management System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_movement.php?id=.
CVE-2022-32024 1 Car Rental Management System Project 1 Car Rental Management System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Car Rental Management System v1.0 is vulnerable to SQL Injection via car-rental-management-system/booking.php?car_id=.
CVE-2022-32022 1 Car Rental Management System Project 1 Car Rental Management System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Car Rental Management System v1.0 is vulnerable to SQL Injection via /ip/car-rental-management-system/admin/ajax.php?action=login.
CVE-2022-32025 1 Car Rental Management System Project 1 Car Rental Management System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/view_car.php?id=.