Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

DATE CVE VULNERABILITY TITLE RISK
2025-01-04 CVE-2024-41767 IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection.
network
low complexity
CWE-89
7.3
2025-01-04 CVE-2025-0210 SQL Injection vulnerability in Campcodes School Faculty Scheduling System 1.0
A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical.
network
low complexity
campcodes CWE-89
critical
9.8
2025-01-04 CVE-2025-0207 SQL Injection vulnerability in Code-Projects Online Shoe Store 1.0
A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0.
network
low complexity
code-projects CWE-89
critical
9.8
2025-01-04 CVE-2025-0208 SQL Injection vulnerability in Code-Projects Online Shoe Store 1.0
A vulnerability, which was classified as critical, was found in code-projects Online Shoe Store 1.0.
network
low complexity
code-projects CWE-89
critical
9.8
2025-01-04 CVE-2024-12195 SQL Injection vulnerability in Wedevs WP Project Manager
The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to SQL Injection via the 'project_id' parameter of the /wp-json/pm/v2/projects/2/task-lists REST API endpoint in all versions up to, and including, 2.6.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
wedevs CWE-89
6.5
2025-01-04 CVE-2025-0205 SQL Injection vulnerability in Code-Projects Online Shoe Store 1.0
A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0.
network
low complexity
code-projects CWE-89
critical
9.8
2025-01-04 CVE-2025-0204 SQL Injection vulnerability in Code-Projects Online Shoe Store 1.0
A vulnerability was found in code-projects Online Shoe Store 1.0.
network
low complexity
code-projects CWE-89
critical
9.8
2025-01-04 CVE-2025-0203 SQL Injection vulnerability in Code-Projects Student Management System 1.0
A vulnerability was found in code-projects Student Management System 1.0.
network
low complexity
code-projects CWE-89
critical
9.8
2025-01-02 CVE-2025-0173 SQL Injection vulnerability in Oretnom23 Online Eyewear Shop 1.0
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as critical.
network
low complexity
oretnom23 CWE-89
7.5
2025-01-02 CVE-2024-56247 SQL Injection vulnerability in Afthemes WP Post Author
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AF themes WP Post Author allows SQL Injection.This issue affects WP Post Author: from n/a through 3.8.2.
network
low complexity
afthemes CWE-89
7.2