Vulnerabilities (CVE)

Filtered by CWE-89
Total 14524 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-45208 1 Jeecg 1 Jeecg Boot 2024-11-21 N/A 4.3 MEDIUM
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin.
CVE-2022-45207 1 Jeecg 1 Jeecg Boot 2024-11-21 N/A 9.8 CRITICAL
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.
CVE-2022-45206 1 Jeecg 1 Jeecg Boot 2024-11-21 N/A 9.8 CRITICAL
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.
CVE-2022-45205 1 Jeecg 1 Jeecg Boot 2024-11-21 N/A 5.3 MEDIUM
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.
CVE-2022-45090 1 Gruparge 1 Smartpower Web 2024-11-21 N/A 8.8 HIGH
Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection.This issue affects Smartpower Web: before 23.01.01.
CVE-2022-45089 1 Gruparge 1 Smartpower Web 2024-11-21 N/A 8.8 HIGH
Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection.This issue affects Smartpower Web: before 23.01.01.
CVE-2022-44860 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2024-11-21 N/A 7.2 HIGH
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/update_status.php.
CVE-2022-44859 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2024-11-21 N/A 7.2 HIGH
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/manage_product.php.
CVE-2022-44858 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2024-11-21 N/A 7.2 HIGH
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/products/view_product.php.
CVE-2022-44820 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2024-11-21 N/A 7.2 HIGH
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/manage_transaction&id=.
CVE-2022-44785 1 Maggioli 1 Appalti \& Contratti 2024-11-21 N/A 9.8 CRITICAL
An issue was discovered in Appalti & Contratti 9.12.2. The target web applications are subject to multiple SQL Injection vulnerabilities, some of which executable even by unauthenticated users, as demonstrated by the GetListaEnti.do cfamm parameter.
CVE-2022-44727 1 Lineagrafica 1 Eu Cookie Law Gdpr 2024-11-21 N/A 9.1 CRITICAL
The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ).
CVE-2022-44588 1 Blocksera 1 Cryptocurrency Widgets Pack 2024-11-21 N/A 9.9 CRITICAL
Unauth. SQL Injection vulnerability in Cryptocurrency Widgets Pack Plugin <=1.8.1 on WordPress.
CVE-2022-44580 1 Richplugins 1 Plugin For Google Reviews 2024-11-21 N/A 9.1 CRITICAL
SQL Injection (SQLi) vulnerability in RichPlugins Plugin for Google Reviews plugin <= 2.2.3 versions.
CVE-2022-44415 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2024-11-21 N/A 7.2 HIGH
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/view_mechanic.php?id=.
CVE-2022-44414 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2024-11-21 N/A 7.2 HIGH
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manage_service.php?id=.
CVE-2022-44413 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2024-11-21 N/A 7.2 HIGH
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/manage_mechanic.php?id=.
CVE-2022-44403 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2024-11-21 N/A 7.2 HIGH
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manage_user&id=.
CVE-2022-44402 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2024-11-21 N/A 7.2 HIGH
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_transaction.
CVE-2022-44379 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2024-11-21 N/A 7.2 HIGH
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_service.