Vulnerabilities (CVE)

Filtered by CWE-89
Total 20788 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-33969 1 Janobe 5 Credit Card, Debit Card Payment, Paypal and 2 more 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/AttendanceMonitoring/department/index.php' parameter.
CVE-2024-33968 1 Janobe 5 Credit Card, Debit Card Payment, Paypal and 2 more 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Attendance' and 'YearLevel' in '/AttendanceMonitoring/report/index.php' parameter.
CVE-2024-33967 1 Janobe 5 Credit Card, Debit Card Payment, Paypal and 2 more 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'view' in 'Attendance' and 'YearLevel' in '/AttendanceMonitoring/report/attendance_print.php' parameter.
CVE-2024-33966 1 Janobe 5 Credit Card, Debit Card Payment, Paypal and 2 more 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'xtsearch' in '/admin/mod_reports/index.php' parameter.
CVE-2024-33965 1 Janobe 5 Credit Card, Debit Card Payment, Paypal and 2 more 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'view' in '/tubigangarden/admin/mod_accomodation/index.php' parameter.
CVE-2024-33964 1 Janobe 5 Credit Card, Debit Card Payment, Paypal and 2 more 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/admin/mod_users/index.php' parameter.
CVE-2024-33963 1 Janobe 5 Credit Card, Debit Card Payment, Paypal and 2 more 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/admin/mod_room/index.php' parameter.
CVE-2024-33962 1 Janobe 5 Credit Card, Debit Card Payment, Paypal and 2 more 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'code' in '/admin/mod_reservation/index.php' parameter.
CVE-2024-33961 1 Janobe 5 Credit Card, Debit Card Payment, Paypal and 2 more 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'code' in '/admin/mod_reservation/controller.php' parameter.
CVE-2024-33960 1 Janobe 3 Credit Card, Debit Card Payment, Paypal 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'end' in '/admin/mod_reports/printreport.php' parameter.
CVE-2024-33959 1 Janobe 5 Credit Card, Debit Card Payment, Paypal and 2 more 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'categ' in '/admin/mod_reports/printreport.php' parameter.
CVE-2024-33958 1 Janobe 1 Young Entrepreneur E-negosyo System 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'phonenumber' in '/passwordrecover.php' parameter.
CVE-2024-33957 1 Janobe 1 Young Entrepreneur E-negosyo System 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'id' in '/admin/orders/controller.php' parameter
CVE-2024-33911 1 Weblizar 1 School Management 2026-06-17 N/A 7.6 HIGH
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar School Management Pro.This issue affects School Management Pro: from n/a through 10.3.4.
CVE-2024-33872 2026-06-17 N/A 9.8 CRITICAL
Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code execution and escalation of privileges.
CVE-2024-33854 1 Centreon 1 Centreon Web 2026-06-17 N/A 9.1 CRITICAL
A SQL Injection vulnerability exists in the Graph Template component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.
CVE-2024-33853 1 Centreon 1 Centreon Web 2026-06-17 N/A 9.1 CRITICAL
A SQL Injection vulnerability exists in the Timeperiod component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.
CVE-2024-33852 1 Centreon 1 Centreon Web 2026-06-17 N/A 9.1 CRITICAL
A SQL Injection vulnerability exists in the Downtime component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.
CVE-2024-33808 1 Campcodes 1 Complete Web-based School Management System 2026-06-17 N/A 9.8 CRITICAL
A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVE-2024-33807 1 Campcodes 1 Complete Web-based School Management System 2026-06-17 N/A 5.4 MEDIUM
A SQL injection vulnerability in /model/get_teacher_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter.