Falhas do tipo CWE-89

11.820 resultados
CVE-2023-39292CRITICALA SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious acEPSS 0.5%CVE-2025-26614CRITICALSQL Injection endpoint 'deletar_documento.php' parameter 'id_cargo' in WeGIAEPSS 0.5%CVE-2025-4812MEDIUMPHPGurukul Human Metapneumovirus Testing Management System profile.php sql injectionEPSS 0.5%CVE-2025-8166MEDIUMcode-projects Church Donation System HTTP POST Request index.php sql injectionEPSS 0.5%CVE-2025-1172MEDIUM1000 Projects Bookstore Management System addtocart.php sql injectionEPSS 0.5%CVE-2025-4713MEDIUMCampcodes Sales and Inventory System print.php sql injectionEPSS 0.5%CVE-2025-8431MEDIUMPHPGurukul Boat Booking System add-boat.php sql injectionEPSS 0.5%CVE-2025-7172MEDIUMcode-projects Crime Reporting System headlogin.php sql injectionEPSS 0.5%CVE-2025-55167CRITICALWeGIA SQL Injection via id_fichamedica at endpoint `GET/html/funcionario/dependente_remover.php`EPSS 0.5%CVE-2025-22957CRITICALA SQL injection vulnerability exists in the front-end of the website in ZZCMS <= 2023, which can be exploited without any authentication. ThEPSS 0.5%CVE-2025-3243MEDIUMcode-projects Patient Record Management System dental_form.php sql injectionEPSS 0.5%CVE-2024-36673CRITICALSourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php. This vulnerability stems from inadEPSS 0.5%CVE-2024-34533HIGHA SQL injection vulnerability in ZI PT Solusi Usaha Mudah Analytic Data Query module (aka izi_data) 11.0 through 17.x before 17.0.3 allows aEPSS 0.5%CVE-2024-9925CRITICALSQL injection in QPLANT by TAI Smart FactoryEPSS 0.5%CVE-2024-52474CRITICALWordPress Express Payments plugin <= 1.1.8 - SQL Injection vulnerabilityEPSS 0.5%CVE-2025-13757HIGHSQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025.2.20, through 2025.EPSS 0.5%CVE-2024-41679MEDIUMAuthenticated SQL injection in ticket formEPSS 0.5%CVE-2024-45608MEDIUMGLPI has an Authenticated SQL InjectionEPSS 0.5%CVE-2025-11944MEDIUMgivanz Vvveb Raw SQL import.php import sql injectionEPSS 0.5%CVE-2022-35956MEDIUMupdate_by_case before 0.1.3 vulnerable to sql injectionEPSS 0.5%