Total
15171 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2022-43278 | 1 Canteen Management System Project | 1 Canteen Management System | 2025-05-01 | N/A | 7.2 HIGH |
| Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the categoriesId parameter at /php_action/fetchSelectedCategories.php. | |||||
| CVE-2022-43058 | 1 Online Diagnostic Lab Management System Project | 1 Online Diagnostic Lab Management System | 2025-05-01 | N/A | 9.8 CRITICAL |
| Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=delete_activity. | |||||
| CVE-2024-33124 | 1 Roothub | 1 Roothub | 2025-05-01 | N/A | 9.8 CRITICAL |
| Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter in the parentNode() function.. | |||||
| CVE-2024-33122 | 1 Roothub | 1 Roothub | 2025-05-01 | N/A | 6.3 MEDIUM |
| Roothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in the list() function. | |||||
| CVE-2022-44727 | 1 Lineagrafica | 1 Eu Cookie Law Gdpr | 2025-05-01 | N/A | 9.1 CRITICAL |
| The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ). | |||||
| CVE-2022-43672 | 1 Zohocorp | 3 Manageengine Access Manager Plus, Manageengine Pam360, Manageengine Password Manager Pro | 2025-05-01 | N/A | 9.8 CRITICAL |
| Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection (in a different software component relative to CVE-2022-43671. | |||||
| CVE-2022-43671 | 1 Zohocorp | 3 Manageengine Access Manager Plus, Manageengine Pam360, Manageengine Password Manager Pro | 2025-05-01 | N/A | 9.8 CRITICAL |
| Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection. | |||||
| CVE-2022-39069 | 1 Zte | 1 Zaip-aie | 2025-05-01 | N/A | 5.3 MEDIUM |
| There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content. | |||||
| CVE-2020-8887 | 1 Telestream | 2 Medius, Sentry | 2025-05-01 | 5.0 MEDIUM | 7.5 HIGH |
| Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index.php (aka the server login page). | |||||
| CVE-2023-33676 | 1 Oretnom23 | 1 Lost And Found Information System | 2025-05-01 | N/A | 8.4 HIGH |
| Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=*" which can be escalated to the remote command execution. | |||||
| CVE-2024-1068 | 1 Ajexperience | 1 404 Solution | 2025-05-01 | N/A | 7.2 HIGH |
| The 404 Solution WordPress plugin before 2.35.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admins. | |||||
| CVE-2024-37799 | 1 Code-projects | 1 Restaurant Reservation System | 2025-04-30 | N/A | 5.4 MEDIUM |
| CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reserv_id parameter at view_reservations.php. | |||||
| CVE-2025-4024 | 1 Angeljudesuarez | 1 Placement Management System | 2025-04-30 | 7.5 HIGH | 7.3 HIGH |
| A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /add_drive.php. The manipulation of the argument drive_title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. | |||||
| CVE-2025-4025 | 1 Angeljudesuarez | 1 Placement Management System | 2025-04-30 | 7.5 HIGH | 7.3 HIGH |
| A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. | |||||
| CVE-2024-2777 | 1 Campcodes | 1 Online Marriage Registration System | 2025-04-30 | 6.5 MEDIUM | 6.3 MEDIUM |
| A vulnerability has been found in Campcodes/PHPGurukul Online Marriage Registration System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/application-bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. | |||||
| CVE-2022-43288 | 1 Rukovoditel | 1 Rukovoditel | 2025-04-30 | N/A | 8.8 HIGH |
| Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the order_by parameter at /rukovoditel/index.php?module=logs/view&type=php. | |||||
| CVE-2022-42984 | 1 Wowonder | 1 Wowonder | 2025-04-30 | N/A | 9.8 CRITICAL |
| WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=search&s=recipients. | |||||
| CVE-2022-40405 | 1 Wowonder | 1 Wowonder | 2025-04-30 | N/A | 7.5 HIGH |
| WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=load-my-blogs. | |||||
| CVE-2025-3955 | 1 Code-projects | 1 Patient Record Management System | 2025-04-30 | 6.5 MEDIUM | 6.3 MEDIUM |
| A vulnerability, which was classified as critical, was found in codeprojects Patient Record Management System 1.0. This affects an unknown part of the file /edit_rpatient.php.php. The manipulation of the argument id/lastname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. | |||||
| CVE-2025-3968 | 1 Code-projects | 1 News Publishing Site Dashboard | 2025-04-30 | 6.5 MEDIUM | 6.3 MEDIUM |
| A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /api.php. The manipulation of the argument cat_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. | |||||