Base de CVEs

CVE-2024-58308 Crítica · 9.8 CWE-89 11/12/2025

Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login

Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating the login form. Attackers can inject specific SQL payloads like ' or '1'='1 to gain unauthorized administrative access to the system.

CVE-2024-58307 Alta · 8.8 CWE-89 11/12/2025

CSZCMS 1.3.0 Authenticated SQL Injection via Members View Endpoint

CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks and extract database information.

CVE-2024-58301 Crítica · 9.3 CWE-89 11/12/2025

Purei CMS 1.0: injeção de SQL cega baseada em tempo

O Purei CMS 1.0 contém uma vulnerabilidade de injeção de SQL cega baseada em tempo que permite que atacantes manipulem consultas ao banco de dados por meio de parâmetros de entrada do usuário sem filtragem. Atacantes podem explorar endpoints vulneráveis como getAllParks.php e events-ajax.php, injetando payloads SQL elaborados para potencialmente extrair ou modificar informações do banco de dados.

CVE-2024-58290 Crítica · 9.3 CWE-89 11/12/2025

Injeção de SQL no Xhibiter NFT Marketplace 1.10.2 via endpoint de coleções

O Xhibiter NFT Marketplace 1.10.2 contém uma vulnerabilidade de injeção de SQL no endpoint de coleções que permite que atacantes manipulem consultas ao banco de dados por meio do parâmetro 'id'. Atacantes podem explorar técnicas de injeção de SQL baseadas em booleano, baseadas em tempo e baseadas em UNION para potencialmente extrair ou manipular informações do banco de dados, enviando cargas maliciosas elaboradas para a página de coleções.

CVE-2025-14537 Crítica · 9.8 CWE-89 11/12/2025

code-projects Class and Exam Timetable Management preview7.php sql injection

A weakness has been identified in code-projects Class and Exam Timetable Management 1.0. Affected by this issue is some unknown functionality of the file /preview7.php. This manipulation of the argument course_year_section/semester causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.

CVE-2025-14536 Crítica · 9.8 CWE-89 11/12/2025

code-projects Class and Exam Timetable Management Login index.php sql injection

A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument username/password results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited.

CVE-2025-13214 Alta · 8.8 CWE-89 11/12/2025

IBM Aspera Orchestrator SQL Injection

IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

CVE-2025-14529 Crítica · 9.8 CWE-89 11/12/2025

Campcodes Retro Basketball Shoes Online Store admin_running.php sql injection

A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The affected element is an unknown function of the file /admin/admin_running.php. This manipulation of the argument pid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.

CVE-2025-14527 Crítica · 9.8 CWE-89 11/12/2025

projectworlds Advanced Library Management System view_book.php sql injection

A weakness has been identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /view_book.php. Executing a manipulation of the argument book_id can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

CVE-2025-14515 Crítica · 9.8 CWE-89 11/12/2025

Campcodes Supplier Management System add_unit.php sql injection

A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add_unit.php. Such manipulation of the argument txtunitDetails leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-14514 Crítica · 9.8 CWE-89 11/12/2025

Campcodes Supplier Management System add_distributor.php sql injection

A flaw has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/add_distributor.php. This manipulation of the argument txtDistributorAddress causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.

CVE-2025-10163 Média · 6.5 CWE-89 11/12/2025

List Category Posts <= 0.91.0 - Authenticated (Contributor+) SQL Injection via Plugin's Shortcode

The List category posts plugin for WordPress is vulnerable to time-based SQL Injection via the ‘starting_with’ parameter of the catlist shortcode in all versions up to, and including, 0.91.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

CVE-2025-67644 Alta · 7.8 CWE-89 10/12/2025

LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Versions 3.0.0 and below are vulnerable to SQL injection through the checkpoint implementation. Checkpoint allows attackers to manipulate SQL queries through metadata filter keys, affecting applications that accept untrusted metadata filter keys (not just filter values) in checkpoint search operations. The _metadata_predicate() function constructs SQL queries by interpolating filter keys directly into f-strings without validation. This issue is fixed in version 3.0.1.

CVE-2025-65950 Alta · 8.8 CWE-89 10/12/2025

WBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups[] Parameter

WBCE CMS is a content management system. In versions 1.6.4 and below, the user management module allows a low-privileged authenticated user with permissions to modify users to execute arbitrary SQL queries. This can be escalated to a full database compromise, data exfiltration, effectively bypassing all security controls. The vulnerability exists in the admin/users/save.php script, which handles updates to user profiles. The script improperly processes the groups[] parameter sent from the user edit form. This issue is fixed in version 1.6.5.

CVE-2025-67501 Alta · 8.8 CWE-89 09/12/2025

WeGIA is vulnerable to SQL Injection via editar_categoria endpoint parameter

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain an SQL Injection vulnerability in the /html/matPat/editar_categoria.php endpoint. The application fails to properly validate and sanitize user inputs in the id_categoria parameter, which allows attackers to inject malicious SQL payloads for direct execution. This issue is fixed in version 3.5.5.

CVE-2021-47708 Crítica · 9.3 CWE-89 09/12/2025

Bypass de Autenticação por Injeção de SQL no Sistema de Controle IoT Smart Home da COMMAX

O sistema COMMAX Smart Home CDP-1020n contém uma vulnerabilidade de injeção de SQL que permite que atacantes contornem a autenticação ao injetar código SQL arbitrário pelo parâmetro 'id' em 'loginstart.asp'. Atacantes podem explorar isso enviando uma requisição POST com valores 'id' maliciosos para manipular consultas ao banco de dados e obter acesso não autorizado.

CVE-2021-47704 Média · 6.5 CWE-89 09/12/2025

OpenBMCS SQL Injection via obix_test.php

OpenBMCS 2.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting arbitrary SQL code. Attackers can send GET requests to /debug/obix_test.php with malicious 'id' values to extract database information.

CVE-2025-14337 Crítica · 9.8 CWE-89 09/12/2025

itsourcecode Student Management System new_grade.php sql injection

A vulnerability was determined in itsourcecode Student Management System 1.0. This affects an unknown part of the file /new_grade.php. This manipulation of the argument grade causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2025-14334 Crítica · 9.8 CWE-89 09/12/2025

itsourcecode Student Management System new_adviser.php sql injection

A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /new_adviser.php. Executing manipulation of the argument Name can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.

CVE-2025-64156 Alta · 7.2 CWE-89 09/12/2025

SQL Injection em Fortinet Fortivoice

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7, FortiVoice 6.4 all versions, FortiVoice 6.0 all versions may allow an authenticated privileged attacker to execute unauthorized code or commands via crafted requests

CVE-2025-63742 Crítica · 9.8 CWE-89 09/12/2025

SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in...

SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, including administrator accounts, password hashes, database structure, and other critical data via the shouji and userid parameters.

CVE-2025-63740 Média · 4.3 CWE-89 09/12/2025

SQL Injection vulnerability in function getselectdataAjax in file inputAction.php in Xinhu...

SQL Injection vulnerability in function getselectdataAjax in file inputAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, including administrator accounts, password hashes, database structure, and other critical data via the actstr parameter.

CVE-2025-67520 Alta · 7.6 CWE-89 09/12/2025

WordPress Media Library Tools plugin <= 1.6.15 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tiny Solutions Media Library Tools media-library-tools allows SQL Injection.This issue affects Media Library Tools: from n/a through <= 1.6.15.

CVE-2025-67519 Alta · 7.6 CWE-89 09/12/2025

WordPress Ninja Tables plugin <= 5.2.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows SQL Injection.This issue affects Ninja Tables: from n/a through <= 5.2.3.

CVE-2025-67518 Alta · 8.5 CWE-89 09/12/2025

WordPress Accordion Slider PRO plugin <= 1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Accordion Slider PRO accordion_slider_pro allows Blind SQL Injection.This issue affects Accordion Slider PRO: from n/a through <= 1.2.