#cwe-89

共收录 2560 条相关情报。

← 返回所有主题
漏洞预警2026-06-09 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Netcad Software Inc. E-İmar allows SQL Injection. This issue affects E-İma...

CVE-2026-7486

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Netcad Software In

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the ...

CVE-2017-20249

Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious cod...

CVE-2017-20247

WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to read database contents by exploiting an unescaped GET para...

CVE-2017-20246

KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by exploiting the unescaped ...

CVE-2017-20245

Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Wow Forms WordPress Plugin version 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to read arbitrary database information by exploiting an unes...

CVE-2017-20244

Wow Forms WordPress Plugin version 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布HIGH

WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by...

CVE-2017-20243

WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerability that allows un

来源摘录 · NVD

漏洞预警2026-06-09 发布INFO

Product Catalog 8 1.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious ...

CVE-2016-20065

Product Catalog 8 1.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Single Personal Message 1.0.3 contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries by injecting malicious code through the me...

CVE-2016-20063

Single Personal Message 1.0.3 contains an SQL injection vulnerability that allows authenticated users to execute arbitra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Simply Poll 1.4.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code throug...

CVE-2016-20062

Simply Poll 1.4.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Backend users with write access to the form_definition database table were able to directly create, update, or delete form definition records via DataHandler, bypassing the Form...

CVE-2026-49741

Backend users with write access to the form_definition database table were able to directly create, update, or delete fo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

SQL injection in the ‘two_steps_auth_code’ parameter processed by the ‘twoStepsAuthVerification’ function within the ‘/user-login’ endpoint. The two-factor authentication (2FA) ...

CVE-2026-10731

SQL injection in the ‘two_steps_auth_code’ parameter processed by the ‘twoStepsAuthVerification’ function within the ‘/u

历史摘要 · 未重新核验 · NVD

安全公告2026-06-09 发布INFO

SAP S/4HANA(On-Premise) contains SQL injection vulnerability in a remote-enabled function module...

CVE-2026-44744

SAP S/4HANA(On-Premise) contains SQL injection vulnerability in a remote-enabled function module component that could be

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-09 发布MEDIUM

SAP S/4HANA(On-Premise) contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially ex...

CVE-2026-44744

该漏洞影响SAP S/4HANA(本地部署版本)中的一个远程启用功能模块组件。认证攻击者可以利用该组件中的SQL注入漏洞,执行未授权的数据库查询,从而访问本应受限的敏感信息。根据CVSS评分,该漏洞对数据的机密性影响较高(C:H),但对完整

历史摘要 · 未重新核验 · NVD

安全公告2026-06-08 发布INFO

FUXA has SQL Injection in its TDengine DAQ connector via backslash bypass of escapeTdString

CVE-2026-47720

## Summary The TDengine DAQ storage connector's `escapeTdString` at `server/runtime/storage/tdengine/index.js:10` doubl

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-08 发布INFO

A vulnerability was determined in CodeAstro Student Attendance Management System 1.0. Affected is an unknown function of the file /attendance-php/Admin/createClassArms.php. This...

CVE-2026-11585

A vulnerability was determined in CodeAstro Student Attendance Management System 1.0. Affected is an unknown function of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A vulnerability was found in CodeAstro Student Attendance Management System 1.0. This impacts an unknown function of the file /attendance-php/Admin/createClass.php?action=edit. ...

CVE-2026-11584

A vulnerability was found in CodeAstro Student Attendance Management System 1.0. This impacts an unknown function of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A vulnerability has been found in CodeAstro Student Attendance Management System 1.0. This affects an unknown function of the file /attendance-php/Admin/createClass.php. The man...

CVE-2026-11583

A vulnerability has been found in CodeAstro Student Attendance Management System 1.0. This affects an unknown function o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A flaw has been found in CodeAstro Student Attendance Management System 1.0. The impacted element is an unknown function of the file /attendance-php/index.php. Executing a manip...

CVE-2026-11582

A flaw has been found in CodeAstro Student Attendance Management System 1.0. The impacted element is an unknown function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A vulnerability was detected in CodeAstro Payroll System 1.0. This affects an unknown function of the file /view_account.php. The manipulation of the argument ID results in sql ...

CVE-2026-11559

A vulnerability was detected in CodeAstro Payroll System 1.0. This affects an unknown function of the file /view_account

历史摘要 · 未重新核验 · NVD