Vulnerabilities (CVE)

Filtered by CWE-89
Total 20791 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-24788 1 Notrinos 1 Notrinoserp 2026-06-17 N/A 8.8 HIGH
NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/sales/customer_delivery.php.
CVE-2023-24782 1 Funadmin 1 Funadmin 2026-06-17 N/A 9.8 CRITICAL
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit.
CVE-2023-24781 1 Funadmin 1 Funadmin 2026-06-17 N/A 9.8 CRITICAL
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php.
CVE-2023-24780 1 Funadmin 1 Funadmin 2026-06-17 N/A 9.8 CRITICAL
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns.
CVE-2023-24777 1 Funadmin 1 Funadmin 2026-06-17 N/A 9.8 CRITICAL
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.
CVE-2023-24775 1 Funadmin 1 Funadmin 2026-06-17 N/A 9.8 CRITICAL
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.
CVE-2023-24774 1 Funadmin 1 Funadmin 2026-06-17 N/A 9.8 CRITICAL
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php.
CVE-2023-24773 1 Funadmin 1 Funadmin 2026-06-17 N/A 9.8 CRITICAL
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list.
CVE-2023-24763 1 Prestashop 1 Xen Forum 2026-06-17 N/A 8.8 HIGH
In the module "Xen Forum" (xenforum) for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0.
CVE-2023-24732 1 Oretnom23 1 Simple Customer Relationship Management System 2026-06-17 N/A 8.8 HIGH
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function.
CVE-2023-24731 1 Oretnom23 1 Simple Customer Relationship Management System 2026-06-17 N/A 8.8 HIGH
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update function.
CVE-2023-24730 1 Oretnom23 1 Simple Customer Relationship Management System 2026-06-17 N/A 8.8 HIGH
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update function.
CVE-2023-24729 1 Oretnom23 1 Simple Customer Relationship Management System 2026-06-17 N/A 8.8 HIGH
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update function.
CVE-2023-24728 1 Oretnom23 1 Simple Customer Relationship Management System 2026-06-17 N/A 8.8 HIGH
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function.
CVE-2023-24726 1 Phpgurukul 1 Art Gallery Management System 2026-06-17 N/A 9.8 CRITICAL
Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page.
CVE-2023-24685 1 Churchcrm 1 Churchcrm 2026-06-17 N/A 7.2 HIGH
ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the Event parameter under the Event Attendance reports module.
CVE-2023-24684 1 Churchcrm 1 Churchcrm 2026-06-17 N/A 7.2 HIGH
ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the EID parameter at GetText.php.
CVE-2023-24656 1 Oretnom23 1 Simple Customer Relationship Management System 2026-06-17 N/A 8.8 HIGH
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the subject parameter under the Create Ticket function.
CVE-2023-24655 1 Oretnom23 1 Simple Customer Relationship Management System 2026-06-17 N/A 9.8 CRITICAL
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function.
CVE-2023-24654 1 Oretnom23 1 Simple Customer Relationship Management System 2026-06-17 N/A 8.8 HIGH
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Request a Quote function.