Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

DATE CVE VULNERABILITY TITLE RISK
2025-04-03 CVE-2025-3174 SQL Injection vulnerability in Projectworlds Online Lawyer Management System 1.0
A vulnerability has been found in Project Worlds Online Lawyer Management System 1.0 and classified as critical.
network
low complexity
projectworlds CWE-89
critical
9.8
2025-04-03 CVE-2025-3170 SQL Injection vulnerability in Projectworlds Online Lawyer Management System 1.0
A vulnerability classified as critical has been found in Project Worlds Online Lawyer Management System 1.0.
network
low complexity
projectworlds CWE-89
critical
9.8
2025-04-03 CVE-2025-3171 SQL Injection vulnerability in Projectworlds Online Lawyer Management System 1.0
A vulnerability classified as critical was found in Project Worlds Online Lawyer Management System 1.0.
network
low complexity
projectworlds CWE-89
critical
9.8
2025-04-03 CVE-2025-3140 SQL Injection vulnerability in Oretnom23 Online Medicine Ordering System 1.0
A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0.
network
low complexity
oretnom23 CWE-89
critical
9.8
2025-04-03 CVE-2025-3141 SQL Injection vulnerability in Oretnom23 Online Medicine Ordering System 1.0
A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0.
network
low complexity
oretnom23 CWE-89
critical
9.8
2025-04-03 CVE-2025-3137 SQL Injection vulnerability in PHPgurukul Online Security Guards Hiring System 1.0
A vulnerability, which was classified as critical, was found in PHPGurukul Online Security Guards Hiring System 1.0.
network
low complexity
phpgurukul CWE-89
critical
9.8
2025-04-03 CVE-2025-3138 SQL Injection vulnerability in PHPgurukul Online Security Guards Hiring System 1.0
A vulnerability has been found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as critical.
network
low complexity
phpgurukul CWE-89
critical
9.8
2025-04-02 CVE-2025-3119 SQL Injection vulnerability in Oretnom23 Online Tutor Portal 1.0
A vulnerability was found in SourceCodester Online Tutor Portal 1.0.
network
low complexity
oretnom23 CWE-89
critical
9.8
2025-04-02 CVE-2025-3118 SQL Injection vulnerability in Oretnom23 Online Tutor Portal 1.0
A vulnerability was found in SourceCodester Online Tutor Portal 1.0.
network
low complexity
oretnom23 CWE-89
critical
9.8
2025-04-02 CVE-2024-12410 The Front End Users plugin for WordPress is vulnerable to SQL Injection via the 'UserSearchField' parameter in all versions up to, and including, 3.2.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
CWE-89
4.9