#cwe-89

共收录 2560 条相关情报。

← 返回所有主题
漏洞预警2026-06-05 发布INFO

A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System up to 1.0. This impacts an unknown function of the file /admin/login.php of the...

CVE-2026-10877

A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System up to 1.0. This impact

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipu...

CVE-2026-10875

A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unk

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulati...

CVE-2026-10874

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown

历史摘要 · 未重新核验 · NVD

安全公告2026-06-04 发布INFO

The MasterStudy LMS Pro Plus plugin for WordPress is vulnerable to generic SQL Injection via the ...

CVE-2026-8653

The MasterStudy LMS Pro Plus plugin for WordPress is vulnerable to generic SQL Injection via the 'columns' parameter in

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-04 发布MEDIUM

The MasterStudy LMS Pro Plus plugin for WordPress is vulnerable to generic SQL Injection via the 'columns' parameter in all versions up to, and including, 4.8.20 due to insuffic...

CVE-2026-8653

CVE-2026-8653 是 WordPress MasterStudy LMS Pro Plus 插件中一个严重的 SQL 注入漏洞(CWE-89),影响版本 4.8.20 及之前的所有版本。漏洞位于 'columns' 参数,由于插件

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-03 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla School Management allows SQL Injection. This issue affects School...

CVE-2025-15655

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla School Ma

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-03 发布HIGH

A vulnerability was detected in SourceCodester Pizzafy E-Commerce System 1.0. Affected by this vulnerability is the function Login of the file /admin/admin_class_novo.php of the...

CVE-2026-10704

CVE-2026-10704 是影响 SourceCodester Pizzafy E-Commerce System 1.0 的一个 SQL 注入漏洞。该漏洞位于管理控制面板的 /admin/admin_class_novo.php 文件

历史摘要 · 未重新核验 · NVD

安全公告2026-06-02 发布INFO

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0'...

CVE-2026-5074

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the `get_priv

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order'...

CVE-2026-5073

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'arm_directory

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-02 发布INFO

A flaw has been found in code-projects Student Admission System 1.0. Affected is an unknown function of the file /index.php. This manipulation of the argument eid/did causes sql...

CVE-2026-10620

A flaw has been found in code-projects Student Admission System 1.0. Affected is an unknown function of the file /index.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the `get_private_content_data` AJAX action in all versions up to, and ...

CVE-2026-5074

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the `get_priv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'arm_directory_paging_action' AJAX action in all versions up to, and in...

CVE-2026-5073

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'arm_directory

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

A security flaw has been discovered in DedeCMS 5.7.88. This affects the function RemoveXSS of the file /plus/carbuyaction.php. The manipulation of the argument postname/des resu...

CVE-2026-10608

A security flaw has been discovered in DedeCMS 5.7.88. This affects the function RemoveXSS of the file /plus/carbuyactio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

A vulnerability was identified in DedeCMS 5.7.88. The impacted element is the function dede_htmlspecialchars of the file /plus/flink.php. The manipulation of the argument msg le...

CVE-2026-10607

A vulnerability was identified in DedeCMS 5.7.88. The impacted element is the function dede_htmlspecialchars of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

A vulnerability was determined in DedeCMS 5.7.88. The affected element is the function TrimMsg of the file /plus/feedback.php of the component Feedback Handler. Executing a mani...

CVE-2026-10606

A vulnerability was determined in DedeCMS 5.7.88. The affected element is the function TrimMsg of the file /plus/feedbac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Portal allows Blind SQL Injection. This issue affects WP Job ...

CVE-2026-42684

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Porta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

A vulnerability was detected in itsourcecode Fees Management System 1.0. Affected is an unknown function of the file /manage_payment.php. The manipulation of the argument ID res...

CVE-2026-10568

A vulnerability was detected in itsourcecode Fees Management System 1.0. Affected is an unknown function of the file /ma

历史摘要 · 未重新核验 · NVD

安全公告2026-06-02 发布INFO

Pixa Bank 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to...

CVE-2026-49491

Pixa Bank 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract sensitive data by

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-02 发布INFO

A flaw has been found in itsourcecode Fees Management System 1.0. The impacted element is an unknown function of the file /manage_fee.php. Executing a manipulation of the argume...

CVE-2026-10302

A flaw has been found in itsourcecode Fees Management System 1.0. The impacted element is an unknown function of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.63.0, SQLChatAgent executes SQL produced by an LLM, which is influenceable by ...

CVE-2026-25879

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.63.0, SQLChatAgent ex

历史摘要 · 未重新核验 · NVD