Weaknesses of type CWE-89

11,777 results
CVE-2024-25891HIGHChurchCRM 5.5.0 FRBidSheets.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter.EPSS 0.6%CVE-2024-7452MEDIUMitsourcecode Placement Management System view_company.php sql injectionEPSS 0.6%CVE-2024-7289MEDIUMSourceCodester Establishment Billing Management System manage_payment.php sql injectionEPSS 0.6%CVE-2024-6729MEDIUMSourceCodester Kortex Lite Advocate Office Management System add_act.php sql injectionEPSS 0.6%CVE-2024-13024MEDIUMCodezips Blood Bank Management System campaign.php sql injectionEPSS 0.6%CVE-2024-10506MEDIUMcode-projects Blood Bank System B-.php sql injectionEPSS 0.6%CVE-2024-7451MEDIUMitsourcecode Placement Management System apply_now.php sql injectionEPSS 0.6%CVE-2024-8139MEDIUMitsourcecode E-Commerce Website search_list.php sql injectionEPSS 0.6%CVE-2023-2681HIGHSQL Injection on JoraniEPSS 0.6%CVE-2024-7191MEDIUMitsourcecode Society Management System get_balance.php sql injectionEPSS 0.6%CVE-2024-39677MEDIUMNHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilitiesEPSS 0.6%CVE-2024-7363MEDIUMSourceCodester Tracking Monitoring Management System manage_person.php sql injectionEPSS 0.6%CVE-2024-7308MEDIUMSourceCodester Establishment Billing Management System view_bill.php sql injectionEPSS 0.6%CVE-2023-5033MEDIUMOpenRapid RapidCMS cate-edit-run.php sql injectionEPSS 0.6%CVE-2024-25531CRITICALRuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/SearchCondiction.aEPSS 0.6%CVE-2023-39309HIGHWordPress Avada Builder plugin <= 3.11.1 - Auth. SQL Injection vulnerabilityEPSS 0.6%CVE-2024-32127HIGHWordPress Find Duplicates plugin <= 1.4.6 - Auth. SQL Injection vulnerabilityEPSS 0.6%CVE-2025-0491MEDIUMFanli2012 native-php-cms cat_dodel.php sql injectionEPSS 0.6%CVE-2024-25530CRITICALRuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/get_find_condictioEPSS 0.6%CVE-2024-32125HIGHWordPress BA Book Everything plugin <= 1.6.4 - Auth. SQL Injection vulnerabilityEPSS 0.6%