#cwe-89
共收录 2560 条相关情报。
← 返回所有主题 漏洞预警2026-06-05 发布INFO
CVE-2026-10877
A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System up to 1.0. This impact
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-04 发布INFO
CVE-2026-10875
A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unk
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-04 发布INFO
CVE-2026-10874
A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown
历史摘要 · 未重新核验 · NVD
安全公告2026-06-04 发布INFO
CVE-2026-8653
The MasterStudy LMS Pro Plus plugin for WordPress is vulnerable to generic SQL Injection via the 'columns' parameter in
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-04 发布MEDIUM
CVE-2026-8653
CVE-2026-8653 是 WordPress MasterStudy LMS Pro Plus 插件中一个严重的 SQL 注入漏洞(CWE-89),影响版本 4.8.20 及之前的所有版本。漏洞位于 'columns' 参数,由于插件
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-03 发布INFO
CVE-2025-15655
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla School Ma
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-03 发布HIGH
CVE-2026-10704
CVE-2026-10704 是影响 SourceCodester Pizzafy E-Commerce System 1.0 的一个 SQL 注入漏洞。该漏洞位于管理控制面板的 /admin/admin_class_novo.php 文件
历史摘要 · 未重新核验 · NVD
安全公告2026-06-02 发布INFO
CVE-2026-5074
The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the `get_priv
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-02 发布INFO
CVE-2026-5073
The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'arm_directory
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-02 发布INFO
CVE-2026-10620
A flaw has been found in code-projects Student Admission System 1.0. Affected is an unknown function of the file /index.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-02 发布INFO
CVE-2026-5074
The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the `get_priv
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-02 发布INFO
CVE-2026-5073
The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'arm_directory
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-02 发布INFO
CVE-2026-10608
A security flaw has been discovered in DedeCMS 5.7.88. This affects the function RemoveXSS of the file /plus/carbuyactio
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-02 发布INFO
CVE-2026-10607
A vulnerability was identified in DedeCMS 5.7.88. The impacted element is the function dede_htmlspecialchars of the file
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-02 发布INFO
CVE-2026-10606
A vulnerability was determined in DedeCMS 5.7.88. The affected element is the function TrimMsg of the file /plus/feedbac
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-02 发布INFO
CVE-2026-42684
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Porta
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-02 发布INFO
CVE-2026-10568
A vulnerability was detected in itsourcecode Fees Management System 1.0. Affected is an unknown function of the file /ma
历史摘要 · 未重新核验 · NVD
安全公告2026-06-02 发布INFO
CVE-2026-49491
Pixa Bank 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract sensitive data by
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-02 发布INFO
CVE-2026-10302
A flaw has been found in itsourcecode Fees Management System 1.0. The impacted element is an unknown function of the fil
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-01 发布INFO
CVE-2026-25879
Langroid is a framework for building large-language-model-powered applications. Prior to version 0.63.0, SQLChatAgent ex
历史摘要 · 未重新核验 · NVD