Falhas do tipo CWE-89

11.837 resultados
CVE-2026-34400MEDIUMalerta-server has potential SQL Injection vulnerability in Query String Syntax (q=) APIEPSS 0.5%CVE-2025-9420MEDIUMitsourcecode Apartment Management System addfloor.php sql injectionEPSS 0.5%CVE-2025-10784MEDIUMCampcodes Online Learning Management System edit_subject.php sql injectionEPSS 0.5%CVE-2026-49048HIGHJoomla Extension - joomcoder.com - Unauthenticated SQL Injection in JoomCCK extension for Joomla < 6.4.1EPSS 0.5%CVE-2024-41579CRITICALDTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnEPSS 0.5%CVE-2023-39640CRITICALUpLight cookiebanner before 1.5.1 was discovered to contain a SQL injection vulnerability via the component Hook::getHookModuleExecList().EPSS 0.5%CVE-2024-6009MEDIUMitsourcecode Event Calendar process.php regDelete sql injectionEPSS 0.5%CVE-2023-34477Extension - braincert.com - SQLi in Virtual Classroom component for Joomla <= 1.6.0EPSS 0.5%CVE-2023-23758Extension - creative-solutions.net - SQLi in Creative Gallery component for Joomla <= 2.2.0EPSS 0.5%CVE-2024-4466CRITICALSQL injection vulnerability in GescenEPSS 0.5%CVE-2026-7048MEDIUMPhoto Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode AttributeEPSS 0.5%CVE-2024-50942CRITICALqiwen-file v1.4.0 was discovered to contain a SQL injection vulnerability via the component /mapper/NoticeMapper.xml.EPSS 0.5%CVE-2024-6015MEDIUMitsourcecode Online House Rental System manage_user.php sql injectionEPSS 0.5%CVE-2023-43983CRITICALPresto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability via the component disable_json.php.EPSS 0.5%CVE-2024-6013MEDIUMitsourcecode Online Book Store admin_delete.php sql injectionEPSS 0.5%CVE-2024-31234HIGHWordPress REHub Framework plugin < 19.6.2 - SQL Injection vulnerabilityEPSS 0.5%CVE-2023-5268MEDIUMDedeBIZ makehtml_taglist_action.php sql injectionEPSS 0.5%CVE-2023-23574HIGHAuthenticated Blind SQL Injection on alerts count in Guardian/CMC before 22.6.2EPSS 0.5%CVE-2024-6014MEDIUMitsourcecode Document Management System edithis.php sql injectionEPSS 0.5%CVE-2024-5364MEDIUMSourceCodester Best House Rental Management System manage_tenant.php sql injectionEPSS 0.5%