CWE-89
CVEs classified under CWE-89, newest first.
2392 CVEsRSS
CVE-2025-13302Medium· 4.7A vulnerability was identified in code-projects Courier Management System 1.0
A vulnerability was identified in code-projects Courier Management System 1.0. This affects an unknown part of the file /add-new-officer.php. Such manipulation of the argument ManagerName leads to sql injection. The attack can be launche…
CVE-2025-13301High· 7.3A vulnerability was found in itsourcecode Web-Based Internet Laboratory Management System 1.0
A vulnerability was found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /subject/controller.php. The manipulation results in sql injection. It …
CVE-2025-13300High· 7.3A vulnerability has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0
A vulnerability has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected is an unknown function of the file /settings/controller.php. The manipulation leads to sql injection. It is possible to initiate…
CVE-2025-13299High· 7.3A flaw has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0
A flaw has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. This impacts an unknown function of the file /user/controller.php. Executing a manipulation can lead to sql injection. The attack may be performed…
CVE-2025-13298High· 7.3A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Management System 1.0
A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. This affects an unknown function of the file /enrollment/controller.php. Performing a manipulation results in sql injection. The attack is …
CVE-2025-13297High· 7.3A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0
A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impacted element is an unknown function of the file /course/controller.php. Such manipulation leads to sql injection. The…
CVE-2025-13319High· 8.8An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with valid API tokens to inject SQL via crafted input. The API is not enabled by default, and a valid API token is required …
An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with valid API tokens to inject SQL via crafted input. The API is not enabled by default, and a valid API token is required …
CVE-2025-13291High· 7.3A vulnerability was found in Campcodes Supplier Management System 1.0
A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirm_order.php. Performing a manipulation of the argument ID results in sql injection. The attack can be ini…
CVE-2025-13287Medium· 6.3A weakness has been identified in itsourcecode Online Voting System 1.0
A weakness has been identified in itsourcecode Online Voting System 1.0. This affects an unknown function of the file /index.php?page=categories. Executing manipulation of the argument id/category can lead to sql injection. The attack ca…
CVE-2025-13286Medium· 6.3A security flaw has been discovered in itsourcecode Online Voting System 1.0
A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_user. Performing manipulation of the argument ID results in sql injection. Remote…
CVE-2025-13285High· 7.3A vulnerability was identified in itsourcecode Online Voting System 1.0
A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched re…
CVE-2025-13280High· 7.3A vulnerability was determined in CodeAstro Simple Inventory System 1.0
A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injecti…
CVE-2025-13279Medium· 6.3A vulnerability was found in code-projects Nero Social Networking Site 1.0
A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Performing manipulation of the argument ID results in sql injection. The attack may …
CVE-2025-13278Medium· 6.3A vulnerability has been found in projectworlds Advanced Library Management System 1.0
A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrowed_book_search.php. Such manipulation of the argument datefrom/dateto leads to sql injection. The …
CVE-2025-13277High· 7.3A flaw has been found in code-projects Nero Social Networking Site 1.0
A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remo…
CVE-2025-13276High· 7.3A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455
A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument Username results in sql inje…
CVE-2025-13274Medium· 6.3A weakness has been identified in Campcodes School Fees Payment Management System 1.0
A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=delete_fees. Executing a manipulation of the argument ID can lead to…
CVE-2025-13273Medium· 6.3A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0
A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_payment. Performing a manipulation of the argument…
CVE-2025-13272High· 7.3A vulnerability was identified in Campcodes School Fees Payment Management System 1.0
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function of the file /manage_course.php. Such manipulation of the argument ID leads to sql injection. The attack can be execute…
CVE-2025-13271High· 7.3A vulnerability was determined in Campcodes School Fees Payment Management System 1.0
A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitat…
CVE-2025-13270Medium· 6.3A vulnerability was found in Campcodes School Fees Payment Management System 1.0
A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=save_course. The manipulation of the argument ID results in sql injection. The attack may be …
CVE-2025-13269Medium· 6.3A vulnerability has been found in Campcodes School Fees Payment Management System 1.0
A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_payment. The manipulation of the argument ID leads to sql injection. The…
CVE-2025-13267Medium· 6.3A vulnerability was detected in SourceCodester Dental Clinic Appointment Reservation System 1.0
A vulnerability was detected in SourceCodester Dental Clinic Appointment Reservation System 1.0. Impacted is an unknown function of the file /success.php. Performing manipulation of the argument username/password results in sql injection…
CVE-2025-13264Medium· 6.3A security flaw has been discovered in SourceCodester Online Magazine Management System 1.0
A security flaw has been discovered in SourceCodester Online Magazine Management System 1.0. This affects an unknown part of the file /view_magazine.php. The manipulation of the argument ID results in sql injection. The attack may be per…
CVE-2025-13260Medium· 6.3A vulnerability has been found in Campcodes Supplier Management System 1.0
A vulnerability has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /manufacturer/edit_product.php. Such manipulation of the argument cmbProductUnit leads to sql injection. The attack …
CVE-2025-13259Medium· 6.3A flaw has been found in Campcodes Supplier Management System 1.0
A flaw has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/edit_unit.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely.…
CVE-2025-13257High· 7.3A security vulnerability has been detected in itsourcecode Inventory Management System 1.0
A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injecti…
CVE-2025-13256Medium· 6.3A weakness has been identified in projectworlds Advanced Library Management System 1.0
A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrow.php. Executing a manipulation of the argument roll_number can lead to sql injection. It is possib…
CVE-2025-13255Medium· 6.3A security flaw has been discovered in projectworlds Advanced Library Management System 1.0
A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. This issue affects some unknown processing of the file /book_search.php. Performing a manipulation of the argument book_pub/book_title results i…
CVE-2025-13254Medium· 6.3A vulnerability was identified in projectworlds Advanced Library Management System 1.0
A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /add_member.php. Such manipulation of the argument roll_number leads to sql injection. The attack…