Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

DATE CVE VULNERABILITY TITLE RISK
2025-01-07 CVE-2024-12416 The Live Sales Notification for Woocommerce – Woomotiv plugin for WordPress is vulnerable to SQL Injection via the 'woomotiv_seen_products_.*' cookie in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
CWE-89
7.5
7.5
2025-01-05 CVE-2025-0233 SQL Injection vulnerability in Codezips Project Management System 1.0
A vulnerability was found in Codezips Project Management System 1.0.
network
low complexity
codezips CWE-89
critical
 9.8
9.8
2025-01-05 CVE-2025-0231 SQL Injection vulnerability in Codezips GYM Management System 1.0
A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical.
network
low complexity
codezips CWE-89
8.8
8.8
2025-01-05 CVE-2025-0232 SQL Injection vulnerability in Codezips Blood Bank Management System 1.0
A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical.
network
low complexity
codezips CWE-89
8.8
8.8
2025-01-05 CVE-2025-0230 SQL Injection vulnerability in Fabianros Responsive Hotel Site 1.0
A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0.
network
low complexity
fabianros CWE-89
critical
 9.8
9.8
2025-01-05 CVE-2025-0229 SQL Injection vulnerability in Fabianros Travel Management System 1.0
A vulnerability, which was classified as critical, has been found in code-projects Travel Management System 1.0.
network
low complexity
fabianros CWE-89
critical
 9.8
9.8
2025-01-04 CVE-2025-0212 SQL Injection vulnerability in Campcodes Student Grading System 1.0
A vulnerability was found in Campcodes Student Grading System 1.0.
network
low complexity
campcodes CWE-89
critical
 9.8
9.8
2025-01-04 CVE-2024-41767 SQL Injection vulnerability in IBM Engineering Lifecycle Optimization Publishing 7.0.2/7.0.3
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection.
network
low complexity
ibm CWE-89
7.3
7.3
2025-01-04 CVE-2025-0210 SQL Injection vulnerability in Campcodes School Faculty Scheduling System 1.0
A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical.
network
low complexity
campcodes CWE-89
critical
 9.8
9.8
2025-01-04 CVE-2025-0207 SQL Injection vulnerability in Code-Projects Online Shoe Store 1.0
A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0.
network
low complexity
code-projects CWE-89
critical
 9.8
9.8