Filtered by CWE-89
Total 14903 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-33974 1 Janobe 3 School Attendance Monitoring System, School Attendence Monitoring System, School Event Management System 2024-08-07 9.8 Critical
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Users in '/report/printlogs.php' parameter.
CVE-2024-40498 1 Puneethreddyhc 1 Online Shopping System Advanced 2024-08-06 9.8 Critical
SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbitrary code via the register.php
CVE-2024-28297 1 Azursoft 1 Myhorus 2024-08-05 7.5 High
SQL injection vulnerability in AzureSoft MyHorus 4.3.5 allows authenticated users to execute arbitrary SQL commands via unspecified vectors.