#cwe-89
共收录 2560 条相关情报。
← 返回所有主题 漏洞预警2026-06-08 发布INFO
CVE-2026-11482
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unkno
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-08 发布INFO
CVE-2026-11480
A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. Impacted is an unknown funct
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-08 发布INFO
CVE-2026-11475
A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Aff
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-08 发布INFO
CVE-2026-11473
A vulnerability was identified in jflyfox jfinal_cms up to 5.1.0. This impacts the function list of the file Advicefeedb
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-08 发布INFO
CVE-2026-11472
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-08 发布INFO
CVE-2026-11471
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown fu
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-07 发布INFO
CVE-2026-11456
A vulnerability was identified in Chanjet CRM 1.0. This affects an unknown part of the file /tools/jxf_dump_systable.php
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-07 发布MEDIUM
CVE-2026-11453
该漏洞影响 Tiobon Employee Self-Service System(员工自助服务系统)至 7.2 版本。漏洞存在于组件 Login Endpoint 的 /Blog/BlogSearch.aspx 文件中,攻击者可通过操纵
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-06 发布HIGH
CVE-2026-11435
CVE-2026-11435 是 Jinher OA 1.0 中的一个 SQL 注入漏洞。漏洞位于文件 nextselectplan.aspx 的未知函数中,攻击者可以通过参数 httpOID 实施 SQL 注入攻击。该漏洞允许远程、未经身
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-06 发布MEDIUM
CVE-2026-11412
金和OA C6 的 /C6/JHSoft.Web.ModuleCount/GetFormSn.aspx 文件中存在一个未知函数,其参数 queryID 未经过滤,导致 SQL 注入漏洞。攻击者可以远程发送特制请求,利用该漏洞在数据库上执行任
历史摘要 · 未重新核验 · NVD
安全公告2026-06-06 发布INFO
CVE-2026-9829
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based SQL Injectio
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-06 发布INFO
CVE-2026-8978
The OptinCraft – Drag & Drop Optins & Popup Builder for WordPress plugin for WordPress is vulnerable to generic SQL Inje
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-06 发布INFO
CVE-2026-9829
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based SQL Injectio
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-06 发布MEDIUM
CVE-2026-8978
OptinCraft – Drag & Drop Optins & Popup Builder 是一款用于 WordPress 的弹窗和表单构建插件。在其所有版本(包括 1.2.0)中,由于对用户提供的 'order_by' 参数转义不足,
历史摘要 · 未重新核验 · NVD
安全公告2026-06-06 发布INFO
CVE-2026-6448
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-06 发布INFO
CVE-2026-6448
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-05 发布INFO
CVE-2026-45779
OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open X
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-05 发布INFO
CVE-2026-11342
A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown functi
历史摘要 · 未重新核验 · NVD
安全公告2026-06-05 发布INFO
CVE-2026-47384
### Summary
An authenticated user with column-create permission can inject SQL into the bulk groupBy
endpoint by setting
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-05 发布INFO
CVE-2026-11334
A vulnerability was detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979
历史摘要 · 未重新核验 · NVD