Vulnerabilities (CVE)

Filtered by CWE-89
Total 20788 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-28505 1 Jflyfox 1 Jfinal Cms 2026-06-17 6.5 MEDIUM 7.2 HIGH
Jfinal_cms 5.1.0 is vulnerable to SQL Injection via com.jflyfox.system.log.LogController.java.
CVE-2022-28468 1 Payroll Management System Project 1 Payroll Management System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
CVE-2022-28467 1 Online Student Admission Project 1 Online Student Admission 2026-06-17 7.5 HIGH 9.8 CRITICAL
Online Student Admission v1.0 was discovered to contain a SQL injection vulnerability via the txtapplicationID parameter.
CVE-2022-28461 1 Mingyuefusu Project 1 Mingyuefusu 2026-06-17 7.5 HIGH 9.8 CRITICAL
mingyuefusu Library Management System all versions as of 03-27-2022 is vulnerable to SQL Injection.
CVE-2022-28452 1 Redplanetcomputers 1 Laundry Management System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Red Planet Laundry Management System 1.0 is vulnerable to SQL Injection.
CVE-2022-28439 1 Janobe 1 Baby Care System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4.
CVE-2022-28438 1 Janobe 1 Baby Care System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=.
CVE-2022-28437 1 Janobe 1 Baby Care System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=Admin&userid=3.
CVE-2022-28436 1 Janobe 1 Baby Care System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=.
CVE-2022-28435 1 Janobe 1 Baby Care System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1.
CVE-2022-28434 1 Janobe 1 Baby Care System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&sid=2.
CVE-2022-28433 1 Janobe 1 Baby Care System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=.
CVE-2022-28432 1 Janobe 1 Baby Care System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2.
CVE-2022-28431 1 Janobe 1 Baby Care System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2.
CVE-2022-28429 1 Janobe 1 Baby Care System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=.
CVE-2022-28427 1 Janobe 1 Baby Care System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=.
CVE-2022-28426 1 Janobe 1 Baby Care System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=edit&roleid=.
CVE-2022-28425 1 Janobe 1 Baby Care System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&value=1&roleid=.
CVE-2022-28424 1 Janobe 1 Baby Care System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=.
CVE-2022-28423 1 Janobe 1 Baby Care System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete.