Weaknesses of type CWE-89
11,851 resultsCVE-2024-52431CRITICALWordPress WP Video Robot plugin <= 1.20.0 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-4881MEDIUMitsourcecode Restaurant Management System user_save.php sql injectionEPSS 0.4%CVE-2025-49853CRITICALImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in ControlID iDSecure On-premisesEPSS 0.4%CVE-2023-5814MEDIUMSourceCodester Task Reminder System sql injectionEPSS 0.4%CVE-2026-1746MEDIUMJeecgBoot Online Report API loadDictItemByKeyword sql injectionEPSS 0.4%CVE-2025-8936MEDIUM1000 Projects Sales Management System dordupdate.php sql injectionEPSS 0.4%CVE-2023-44293MEDIUM
In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern hEPSS 0.4%CVE-2025-8921MEDIUMcode-projects Job Diary user-apply.php sql injectionEPSS 0.4%CVE-2024-41803MEDIUMXibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet FilterEPSS 0.4%CVE-2024-4145LOWSearch & Replace < 3.2.2 - Admin+ SQL injectionEPSS 0.4%CVE-2026-3292MEDIUMjizhiCMS Batch Model.php findAll sql injectionEPSS 0.4%CVE-2026-2580HIGHWP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' ParameterEPSS 0.4%CVE-2024-30863MEDIUMnetentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php.EPSS 0.4%CVE-2023-44294MEDIUM
In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern hEPSS 0.4%CVE-2023-5813MEDIUMSourceCodester Task Reminder System sql injectionEPSS 0.4%CVE-2026-32969HIGHPre-Auth Blind SQLi in userinfo EndpointEPSS 0.4%CVE-2022-46498LOWHospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the doc_number parameter at his_admin_view_singleEPSS 0.4%CVE-2025-39481CRITICALWordPress Eventer plugin < 3.11.4 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-4764HIGHSQLi in Aida Computer's HotspotEPSS 0.4%CVE-2024-13676MEDIUMCategorized Gallery Plugin <= 2.0 - Authenticated (Contributor+) SQL InjectionEPSS 0.4%