CWE-89
CVEs classified under CWE-89, newest first.
2393 CVEsRSS
CVE-2025-10184NonePoCThe vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider without permission, user interaction, or consent
The vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider without permission, user interaction, or consent. The user is also not notified that SMS data …
CVE-2025-10857High· 7.3A security flaw has been discovered in Campcodes Point of Sale System POS 1.0
A security flaw has been discovered in Campcodes Point of Sale System POS 1.0. Affected by this issue is some unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The at…
CVE-2025-10851High· 7.3A security flaw has been discovered in Campcodes Gym Management System 1.0
A security flaw has been discovered in Campcodes Gym Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to …
CVE-2025-10848Medium· 6.3A vulnerability was identified in Campcodes Society Membership Information System 1.0
A vulnerability was identified in Campcodes Society Membership Information System 1.0. This issue affects some unknown processing of the file /check_student.php. Such manipulation of the argument student_id leads to sql injection. The at…
CVE-2025-10844Medium· 6.3A vulnerability has been found in Portabilis i-Educar up to 2.10
A vulnerability has been found in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /module/Cadastro/aluno. The manipulation of the argument is leads to sql injection. Remote exploitation of…
CVE-2025-10843High· 7.3A flaw has been found in Reservation Online Hotel Reservation System 1.0
A flaw has been found in Reservation Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /reservation/paypalpayout.php. Executing manipulation of the argument confirm can lead to sq…
CVE-2025-10842High· 7.3A vulnerability was detected in code-projects Online Bidding System 1.0
A vulnerability was detected in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /administrator/wew.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated…
CVE-2025-10841High· 7.3A security vulnerability has been detected in code-projects Online Bidding System 1.0
A security vulnerability has been detected in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/weweee.php. Such manipulation of the argument ID leads to sql injection. The attack can be…
CVE-2025-10836High· 7.3A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/print1.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be …
CVE-2025-10835Medium· 6.3A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0
A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/view_payorder.php. Performing manipulation of the argument ID results in sql injection. The a…
CVE-2025-10834High· 7.3A vulnerability was identified in itsourcecode Open Source Job Portal 1.0
A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/login.php. Such manipulation of the argument user_email leads to sql injection. It is possible to la…
CVE-2025-10833High· 7.3A vulnerability was determined in 1000projects Bookstore Management System 1.0
A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument unm causes sql injection. It is possible to initiate th…
CVE-2025-10832High· 7.3A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0
A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. The affected element is an unknown function of the file /admin/fetch_product_details.php. The manipulation of the argument barcode results in sql injection…
CVE-2025-10831High· 7.3A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0
A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_edit1.php. The manipulation of the argument prodcode leads to sql injection. The attack is possib…
CVE-2025-10830High· 7.3A flaw has been found in Campcodes Computer Sales and Inventory System 1.0
A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/inv_edit1.php. Executing manipulation of the argument idd can lead to sql injection. The attack can…
CVE-2025-10829High· 7.3A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0
A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/sup_edit1.php. Performing manipulation of the argument ID results in sql injection. Remote expl…
CVE-2025-10828Medium· 6.3A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0
A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be l…
CVE-2025-10826Medium· 6.3A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0
A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdat…
CVE-2025-10825Medium· 6.3A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0
A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. Affected is an unknown function of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack c…
CVE-2025-10846Medium· 6.3A vulnerability was determined in Portabilis i-Educar up to 2.10
A vulnerability was determined in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/ComponenteCurricular/edit. This manipulation of the argument ID causes sql injection. The attack is possible to…
CVE-2025-10845Medium· 6.3A vulnerability was found in Portabilis i-Educar up to 2.10
A vulnerability was found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/ComponenteCurricular/view. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. T…
CVE-2025-10840Medium· 6.3A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown function of the file /admin/print-payment.php. This manipulation of the argument sql111 causes sql injection. The attack can b…
CVE-2025-10839Medium· 6.3A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0
A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. The impacted element is an unknown function of the file /admin/inv-print.php. The manipulation of the argument ID results in sql injection. It is…
CVE-2025-10817High· 7.3A weakness has been identified in Campcodes Online Learning Management System 1.0
A weakness has been identified in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/admin_user.php. Executing manipulation of the argument firstname can lead to sql injection. The…
CVE-2025-10813High· 7.3A vulnerability was found in code-projects Hostel Management System 1.0
A vulnerability was found in code-projects Hostel Management System 1.0. Affected is an unknown function of the file /justines/admin/mod_reports/index.php. The manipulation of the argument Home results in sql injection. It is possible to…
CVE-2025-10812High· 7.3A vulnerability has been found in code-projects Hostel Management System 1.0
A vulnerability has been found in code-projects Hostel Management System 1.0. This impacts an unknown function of the file /justines/admin/mod_amenities/index.php?view=view. The manipulation of the argument ID leads to sql injection. It …
CVE-2025-59570High· 7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through <= 1.18.6.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through <= 1.18.6.
CVE-2025-58686High· 8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quadlayers Perfect Brands for WooCommerce perfect-woocommerce-brands allows SQL Injection.This issue affects Perfect Brands for WooComm…
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quadlayers Perfect Brands for WooCommerce perfect-woocommerce-brands allows SQL Injection.This issue affects Perfect Brands for WooComm…
CVE-2025-10808High· 7.3A weakness has been identified in Campcodes Farm Management System 1.0
A weakness has been identified in Campcodes Farm Management System 1.0. Impacted is an unknown function of the file /uploadProduct.php. This manipulation of the argument Type causes sql injection. Remote exploitation of the attack is pos…
CVE-2025-10798High· 7.3A vulnerability was identified in code-projects Hostel Management System 1.0
A vulnerability was identified in code-projects Hostel Management System 1.0. Impacted is an unknown function of the file /justines/admin/mod_roomtype/index.php?view=view. Such manipulation of the argument ID leads to sql injection. The …