#cwe-89

共收录 2560 条相关情报。

← 返回所有主题
漏洞预警2026-06-08 发布INFO

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /archive5.php. The manipulation o...

CVE-2026-11482

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unkno

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. Impacted is an unknown function of the file beike/Admin/Routes/admin.php of the compo...

CVE-2026-11480

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. Impacted is an unknown funct

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this vulnerability is the function getStatus of ...

CVE-2026-11475

A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Aff

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A vulnerability was identified in jflyfox jfinal_cms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument ord...

CVE-2026-11473

A vulnerability was identified in jflyfox jfinal_cms up to 5.1.0. This impacts the function list of the file Advicefeedb

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /index1.php. This manipulation of the argume...

CVE-2026-11472

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /index2.php. The manipulation of the a...

CVE-2026-11471

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown fu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-07 发布INFO

A vulnerability was identified in Chanjet CRM 1.0. This affects an unknown part of the file /tools/jxf_dump_systable.php of the component HTTP GET Request Handler. Such manipula...

CVE-2026-11456

A vulnerability was identified in Chanjet CRM 1.0. This affects an unknown part of the file /tools/jxf_dump_systable.php

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-07 发布MEDIUM

A vulnerability was found in Tiobon Employee Self-Service System up to 7.2. Affected by this vulnerability is an unknown functionality of the file /Blog/BlogSearch.aspx of the c...

CVE-2026-11453

该漏洞影响 Tiobon Employee Self-Service System(员工自助服务系统)至 7.2 版本。漏洞存在于组件 Login Endpoint 的 /Blog/BlogSearch.aspx 文件中,攻击者可通过操纵

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-06 发布HIGH

A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectplan.aspx. Such manipulation of the argument httpOID leads to...

CVE-2026-11435

CVE-2026-11435 是 Jinher OA 1.0 中的一个 SQL 注入漏洞。漏洞位于文件 nextselectplan.aspx 的未知函数中,攻击者可以通过参数 httpOID 实施 SQL 注入攻击。该漏洞允许远程、未经身

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-06 发布MEDIUM

A weakness has been identified in Jinher OA C6. The affected element is an unknown function of the file /C6/JHSoft.Web.ModuleCount/GetFormSn.aspx. Executing a manipulation of th...

CVE-2026-11412

金和OA C6 的 /C6/JHSoft.Web.ModuleCount/GetFormSn.aspx 文件中存在一个未知函数,其参数 queryID 未经过滤,导致 SQL 注入漏洞。攻击者可以远程发送特制请求,利用该漏洞在数据库上执行任

历史摘要 · 未重新核验 · NVD

安全公告2026-06-06 发布INFO

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to...

CVE-2026-9829

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based SQL Injectio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The OptinCraft – Drag & Drop Optins & Popup Builder for WordPress plugin for WordPress is...

CVE-2026-8978

The OptinCraft – Drag & Drop Optins & Popup Builder for WordPress plugin for WordPress is vulnerable to generic SQL Inje

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-06 发布INFO

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based SQL Injection via 'compact_album_order_by' Shortcode Parameter in all...

CVE-2026-9829

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based SQL Injectio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-06 发布MEDIUM

The OptinCraft – Drag & Drop Optins & Popup Builder for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter in all versions up to,...

CVE-2026-8978

OptinCraft – Drag & Drop Optins & Popup Builder 是一款用于 WordPress 的弹窗和表单构建插件。在其所有版本(包括 1.2.0)中,由于对用户提供的 'order_by' 参数转义不足,

历史摘要 · 未重新核验 · NVD

安全公告2026-06-06 发布INFO

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable...

CVE-2026-6448

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-06 发布INFO

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order' parameter in all versions up t...

CVE-2026-6448

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open XDMoD versions prior to 10.0.3 that allows an unauthentica...

CVE-2026-45779

OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open X

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown function of the file /details.php. Such manipulation of the arg...

CVE-2026-11342

A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown functi

历史摘要 · 未重新核验 · NVD

安全公告2026-06-05 发布INFO

NocoDB: SQL Injection via Column Title in Bulk GroupBy

CVE-2026-47384

### Summary An authenticated user with column-create permission can inject SQL into the bulk groupBy endpoint by setting

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-05 发布INFO

A vulnerability was detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. This affects an unknown ...

CVE-2026-11334

A vulnerability was detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979

历史摘要 · 未重新核验 · NVD