Vulnerabilities (CVE)

Filtered by CWE-89
Total 20789 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-24142 1 Rems 1 School Task Manager 2026-06-17 N/A 9.8 CRITICAL
Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter.
CVE-2024-24141 1 Remyandrade 1 School Task Manager 2026-06-17 N/A 9.8 CRITICAL
Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter.
CVE-2024-24140 1 Remyandrade 1 Daily Habit Tracker 2026-06-17 N/A 7.2 HIGH
Sourcecodester Daily Habit Tracker App 1.0 allows SQL Injection via the parameter 'tracker.'
CVE-2024-24139 1 Remyandrade 1 Login System With Email Verification 2026-06-17 N/A 7.2 HIGH
Sourcecodester Login System with Email Verification 1.0 allows SQL Injection via the 'user' parameter.
CVE-2024-24133 1 Atmail 1 Atmail 2026-06-17 N/A 9.8 CRITICAL
Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page.
CVE-2024-24112 1 Exrick 1 Xmall 2026-06-17 N/A 9.8 CRITICAL
xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter.
CVE-2024-24110 1 Crmeb 1 Crmeb Java 2026-06-17 N/A 6.5 MEDIUM
SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people.
CVE-2024-24105 1 Carmelo 1 Computer Science Time Table System 2026-06-17 N/A 7.8 HIGH
SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary code via adminFormvalidation.php.
CVE-2024-24101 1 Code-projects 1 Scholars Tracking System 2026-06-17 N/A 9.8 CRITICAL
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update.
CVE-2024-24100 1 Carmelo 1 Computer Book Store 2026-06-17 N/A 8.3 HIGH
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID.
CVE-2024-24099 1 Code-projects 1 Scholars Tracking System 2026-06-17 N/A 5.4 MEDIUM
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update.
CVE-2024-24098 1 Fabian 1 Scholars Tracking System 2026-06-17 N/A 7.8 HIGH
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed.
CVE-2024-24096 1 Carmelo 1 Computer Book Store 2026-06-17 N/A 7.8 HIGH
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN.
CVE-2024-24095 1 Code-projects 1 Simple Stock System 2026-06-17 N/A 9.8 CRITICAL
Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection.
CVE-2024-24093 1 Code-projects 1 Scholars Tracking System 2026-06-17 N/A 9.8 CRITICAL
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information.
CVE-2024-24092 1 Code-projects 1 Scholars Tracking System 2026-06-17 N/A 7.8 HIGH
SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via login.php.
CVE-2024-24029 1 Jfinalcms Project 1 Jfinalcms 2026-06-17 N/A 9.8 CRITICAL
JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data.
CVE-2024-24027 1 Likeshop 1 Likeshop 2026-06-17 N/A 7.2 HIGH
SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function DistributionMemberLogic::getFansLists.
CVE-2024-24023 1 Xxyopen 1 Novel-plus 2026-06-17 N/A 9.8 CRITICAL
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass specially crafted offset, limit, and sort parameters to perform SQL injection via /novel/bookContent/list.
CVE-2024-24021 1 Xxyopen 1 Novel-plus 2026-06-17 N/A 9.8 CRITICAL
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass specially crafted offset, limit, and sort parameters to perform SQL injection via /novel/userFeedback/list.