Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)) — Vulnerability Class 8863

8863 vulnerabilities classified as CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-13770 Uniong|WebITR - SQL Injection — WebITR 6.5 Medium2025-11-28
CVE-2025-13769 Uniong|WebITR - SQL Injection — WebITR 6.5 Medium2025-11-28
CVE-2025-13757 Devolutions Server 安全漏洞 — Server 8.1 -2025-11-27
CVE-2025-11461 Frappe CRM 1.53.1 — Multiple SQL Injections in Dashboard Controller — Frappe CRM 8.8AIHighAI2025-11-26
CVE-2025-62728 Apache Hive: SQL injection vulnerability when processing delete column statistics requests via the HMS Thrift APIs — Apache Hive 8.8AIHighAI2025-11-26
CVE-2025-66260 PostgreSQL SQL Injection (status_sql.php) — Mozart FM Transmitter 9.8AICriticalAI2025-11-26
CVE-2025-59369 ASUS Router 安全漏洞 — Router 6.5AIMediumAI2025-11-25
CVE-2025-13385 Bookme <= 4.2 - Authenticated (Admin+) SQL Injection via 'filter[status]' Parameter — Bookme – Free Online Appointment Booking and Scheduling Plugin 4.9 Medium2025-11-25
CVE-2025-13370 ProjectList <= 0.3.0 - Authenticated (Editor+) SQL Injection via 'id' Parameter — ProjectList 4.9 Medium2025-11-25
CVE-2025-10144 Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection — Perfect Brands for WooCommerce 6.5 Medium2025-11-24
CVE-2025-13586 SourceCodester Online Student Clearance System changepassword.php sql injection — Online Student Clearance System 4.7 Medium2025-11-24
CVE-2025-13585 itsourcecode COVID Tracking System login.php sql injection — COVID Tracking System 7.3 High2025-11-24
CVE-2025-7402 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.95 - Unauthenticated SQL Injection via site_id — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager 7.5 High2025-11-24
CVE-2025-13583 code-projects Question Paper Generator POST Parameter signupscript.php sql injection — Question Paper Generator 7.3 High2025-11-24
CVE-2025-13582 code-projects Jonnys Liquor GET Parameter detail.php sql injection — Jonnys Liquor 7.3 High2025-11-24
CVE-2025-13581 itsourcecode Student Information System schedule_edit1.php sql injection — Student Information System 6.3 Medium2025-11-24
CVE-2025-13580 code-projects Library System mail.php sql injection — Library System 6.3 Medium2025-11-24
CVE-2025-13579 code-projects Library System return.php sql injection — Library System 6.3 Medium2025-11-24
CVE-2025-13578 code-projects Library System Login index.php sql injection — Library System 7.3 High2025-11-24
CVE-2025-13575 code-projects Blog Site Category blog.php category_exists sql injection — Blog Site 6.3 Medium2025-11-24
CVE-2025-13572 projectworlds Advanced Library Management System delete_admin.php sql injection — Advanced Library Management System 7.3 High2025-11-23
CVE-2025-13571 code-projects Simple Food Ordering System listorder.php sql injection — Simple Food Ordering System 6.3 Medium2025-11-23
CVE-2025-13570 itsourcecode COVID Tracking System page sql injection — COVID Tracking System 6.3 Medium2025-11-23
CVE-2025-13569 itsourcecode COVID Tracking System page sql injection — COVID Tracking System 6.3 Medium2025-11-23
CVE-2025-13568 itsourcecode COVID Tracking System page sql injection — COVID Tracking System 6.3 Medium2025-11-23
CVE-2025-13567 itsourcecode COVID Tracking System page sql injection — COVID Tracking System 6.3 Medium2025-11-23
CVE-2025-13561 SourceCodester Company Website CMS index.php sql injection — Company Website CMS 7.3 High2025-11-23
CVE-2025-13560 SourceCodester Company Website CMS reset-password.php sql injection — Company Website CMS 7.3 High2025-11-23
CVE-2025-13557 Campcodes Online Polling System registeracc.php sql injection — Online Polling System 7.3 High2025-11-23
CVE-2025-13556 Campcodes Online Polling System checklogin.php sql injection — Online Polling System 7.3 High2025-11-23

Vulnerabilities classified as CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)) represent 8863 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.