Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)) — Vulnerability Class 8873

8873 vulnerabilities classified as CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-3140 SourceCodester Online Medicine Ordering System view_category.php sql injection — Online Medicine Ordering System 6.3 Medium2025-04-03
CVE-2025-3138 PHPGurukul Online Security Guards Hiring System edit-guard-detail.php sql injection — Online Security Guards Hiring System 7.3 High2025-04-03
CVE-2025-3137 PHPGurukul Online Security Guards Hiring System changeimage.php sql injection — Online Security Guards Hiring System 7.3 High2025-04-03
CVE-2025-3135 fcba_zzm ics-park Smart Park Management System update sql injection — ics-park Smart Park Management System 6.3 Medium2025-04-03
CVE-2025-3134 code-projects Payroll Management System add_overtime.php sql injection — Payroll Management System 6.3 Medium2025-04-03
CVE-2025-3120 SourceCodester Apartment Visitors Management System add-apartment.php sql injection — Apartment Visitors Management System 6.3 Medium2025-04-02
CVE-2025-3119 SourceCodester Online Tutor Portal manage_course.php sql injection — Online Tutor Portal 6.3 Medium2025-04-02
CVE-2025-3118 SourceCodester Online Tutor Portal view_course.php sql injection — Online Tutor Portal 6.3 Medium2025-04-02
CVE-2024-12410 Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection — Front End Users 4.9 Medium2025-04-02
CVE-2024-36465 SQL injection in Zabbix API — Zabbix 8.8AIHighAI2025-04-02
CVE-2025-31619 WordPress Actionwear products sync plugin <= 2.3.3 - SQL Injection vulnerability — Actionwear products sync 8.5 High2025-04-01
CVE-2025-31579 WordPress WP AutoKeyword plugin <= 1.0 - SQL Injection vulnerability — WP AutoKeyword 9.3 Critical2025-04-01
CVE-2025-31553 WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.1 - SQL Injection vulnerability — Advanced WooCommerce Product Sales Reporting 9.3 Critical2025-04-01
CVE-2025-31561 WordPress Ultimate Push Notifications plugin <= 1.2.0 - SQL Injection vulnerability — Ultimate Push Notifications 8.5 High2025-04-01
CVE-2025-31564 WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.2.6 - SQL Injection vulnerability — Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One 8.5 High2025-04-01
CVE-2025-31534 WordPress Shopper plugin <= 3.2.5 - SQL Injection vulnerability — Shopper 9.3 Critical2025-04-01
CVE-2025-31551 WordPress Salesmate Add-On for Gravity Forms plugin <= 2.0.3 - SQL Injection vulnerability — Salesmate Add-On for Gravity Forms 9.3 Critical2025-04-01
CVE-2025-31552 WordPress RSVPMarker plugin <= 11.6.7 - SQL Injection vulnerability — RSVPMarker 9.3 Critical2025-04-01
CVE-2025-31531 WordPress History Log by click5 plugin <= 1.0.13 - SQL Injection vulnerability — History Log by click5 9.3 Critical2025-04-01
CVE-2025-31089 WordPress Order Splitter for WooCommerce plugin <= 5.3.0 - SQL Injection Vulnerability — Order Splitter for WooCommerce 8.5 High2025-04-01
CVE-2025-30807 WordPress Next-Cart Store to WooCommerce Migration plugin <= 3.9.4 - SQL Injection vulnerability — Next-Cart Store to WooCommerce Migration 9.3 Critical2025-04-01
CVE-2025-3096 Clinics Patient Management System SQL Injection — Clinic's Patient Management System 9.8AICriticalAI2025-04-01
CVE-2025-31910 WordPress BookingPress plugin <= 1.1.28 - SQL Injection vulnerability — BookingPress 7.6 High2025-04-01
CVE-2025-31024 WordPress RJ Quickcharts plugin <= 0.6.1 - SQL Injection vulnerability — RJ Quickcharts 8.5 High2025-04-01
CVE-2025-30971 WordPress XV Random Quotes plugin <= 2.0.0 - SQL Injection vulnerability — XV Random Quotes 9.3 Critical2025-04-01
CVE-2025-30886 WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability — JS Help Desk 9.3 Critical2025-04-01
CVE-2025-30876 WordPress Ads by WPQuads plugin <= 2.0.87.1 - SQL Injection Vulnerability — Ads by WPQuads 9.3 Critical2025-04-01
CVE-2025-30622 WordPress PostMash plugin <= 1.0.3 - SQL Injection Vulnerability — PostMash 9.3 Critical2025-04-01
CVE-2025-30774 WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability — Quiz Maker 8.2 High2025-04-01
CVE-2025-30589 WordPress Flickr set slideshows plugin <= 0.9 - SQL Injection Vulnerability — Flickr set slideshows 8.5 High2025-04-01

Vulnerabilities classified as CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)) represent 8873 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.