#cwe-89
共收录 2560 条相关情报。
← 返回所有主题 漏洞预警2026-06-09 发布INFO
CVE-2026-7486
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Netcad Software In
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-09 发布INFO
CVE-2017-20249
Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbit
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-09 发布INFO
CVE-2017-20247
WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-09 发布INFO
CVE-2017-20246
KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to r
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-09 发布INFO
CVE-2017-20245
Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-09 发布INFO
CVE-2017-20244
Wow Forms WordPress Plugin version 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-09 发布HIGH
CVE-2017-20243
WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerability that allows un
来源摘录 · NVD
漏洞预警2026-06-09 发布INFO
CVE-2016-20065
Product Catalog 8 1.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-09 发布INFO
CVE-2016-20063
Single Personal Message 1.0.3 contains an SQL injection vulnerability that allows authenticated users to execute arbitra
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-09 发布INFO
CVE-2016-20062
Simply Poll 1.4.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-09 发布INFO
CVE-2026-49741
Backend users with write access to the form_definition database table were able to directly create, update, or delete fo
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-09 发布INFO
CVE-2026-10731
SQL injection in the ‘two_steps_auth_code’ parameter processed by the ‘twoStepsAuthVerification’ function within the ‘/u
历史摘要 · 未重新核验 · NVD
安全公告2026-06-09 发布INFO
CVE-2026-44744
SAP S/4HANA(On-Premise) contains SQL injection vulnerability in a remote-enabled function module component that could be
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-09 发布MEDIUM
CVE-2026-44744
该漏洞影响SAP S/4HANA(本地部署版本)中的一个远程启用功能模块组件。认证攻击者可以利用该组件中的SQL注入漏洞,执行未授权的数据库查询,从而访问本应受限的敏感信息。根据CVSS评分,该漏洞对数据的机密性影响较高(C:H),但对完整
历史摘要 · 未重新核验 · NVD
安全公告2026-06-08 发布INFO
CVE-2026-47720
## Summary
The TDengine DAQ storage connector's `escapeTdString` at `server/runtime/storage/tdengine/index.js:10` doubl
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-08 发布INFO
CVE-2026-11585
A vulnerability was determined in CodeAstro Student Attendance Management System 1.0. Affected is an unknown function of
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-08 发布INFO
CVE-2026-11584
A vulnerability was found in CodeAstro Student Attendance Management System 1.0. This impacts an unknown function of the
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-08 发布INFO
CVE-2026-11583
A vulnerability has been found in CodeAstro Student Attendance Management System 1.0. This affects an unknown function o
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-08 发布INFO
CVE-2026-11582
A flaw has been found in CodeAstro Student Attendance Management System 1.0. The impacted element is an unknown function
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-08 发布INFO
CVE-2026-11559
A vulnerability was detected in CodeAstro Payroll System 1.0. This affects an unknown function of the file /view_account
历史摘要 · 未重新核验 · NVD