CVE-2025-22699

CRITICAL Year: 2025
CVSS v3 Score
9.0
Critical
Weakness Type
CWE-89
View all →

Vulnerability Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Traveler Code. This issue affects Traveler Code: from n/a through 3.1.0.

Related Vulnerabilities

CVE-2022-1064

CRITICAL
CVSS:9.0(Critical)

SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1.

CWE-892022

CVE-2024-43415

CRITICAL
CVSS:9.0(Critical)

An improper neutralization of special elements used in an SQL command in the papertrail/version- model of the decidim_awesome-module <= v0.11.1 (> 0.9.0) allows an authenticated admin user to manipula...

CWE-892024

CVE-2011-1151

CRITICAL
CVSS:9.1(Critical)

Joomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters.

CWE-892011

CVE-2016-1154

CRITICAL
CVSS:9.1(Critical)

SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CWE-892016

CVE-2016-8640

CRITICAL
CVSS:9.1(Critical)

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to....

CWE-892016

CVE-2016-9272

CRITICAL
CVSS:9.1(Critical)

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service.

CWE-892016