#cwe-89

共收录 2560 条相关情报。

← 返回所有主题
漏洞预警2026-06-01 发布INFO

A vulnerability was identified in OFCMS 1.1.3. This issue affects the function Query of the file \ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\system\SystemDictCont...

CVE-2026-10202

A vulnerability was identified in OFCMS 1.1.3. This issue affects the function Query of the file \ofcms-admin\src\main\j

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-31 发布INFO

A security flaw has been discovered in OFCMS up to 1.1.3. The impacted element is the function Query of the file ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\ComnCo...

CVE-2026-10193

A security flaw has been discovered in OFCMS up to 1.1.3. The impacted element is the function Query of the file ofcms-a

历史摘要 · 未重新核验 · NVD

安全公告2026-05-31 发布INFO

OpenCATS from version 0.9.1a contains an SQL injection vulnerability in DataGrid filter handling...

CVE-2026-49490

OpenCATS from version 0.9.1a contains an SQL injection vulnerability in DataGrid filter handling that allows authenticat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

OpenCATS through 0.9.7.4 contains a sql injection vulnerability in the sortDirection parameter of...

CVE-2026-49489

OpenCATS through 0.9.7.4 contains a sql injection vulnerability in the sortDirection parameter of the DataGrid component

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-31 发布INFO

A security vulnerability has been detected in code-projects Online Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /patien...

CVE-2026-10186

A security vulnerability has been detected in code-projects Online Hospital Management System 1.0. Affected by this vuln

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-31 发布INFO

A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save. This man...

CVE-2026-10185

A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-31 发布INFO

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This impacts an unknown function of the file /classes/Users.php?f=delete. ...

CVE-2026-10184

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This impacts an u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-31 发布INFO

OpenCATS from version 0.9.1a contains an SQL injection vulnerability in DataGrid filter handling that allows authenticated attackers to inject SQL through crafted filters target...

CVE-2026-49490

OpenCATS from version 0.9.1a contains an SQL injection vulnerability in DataGrid filter handling that allows authenticat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-31 发布INFO

OpenCATS through 0.9.7.4 contains a sql injection vulnerability in the sortDirection parameter of the DataGrid component that allows authenticated users to extract database cont...

CVE-2026-49489

OpenCATS through 0.9.7.4 contains a sql injection vulnerability in the sortDirection parameter of the DataGrid component

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-31 发布INFO

A vulnerability was detected in code-projects Online Music Site 1.0. This vulnerability affects unknown code of the file /Administrator/PHP/AdminEditAlbum.php. The manipulation ...

CVE-2026-10178

A vulnerability was detected in code-projects Online Music Site 1.0. This vulnerability affects unknown code of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-31 发布INFO

A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the component Code Generation Workflow. Executing a manipulation...

CVE-2026-10176

A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the com

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-31 发布INFO

A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminUpdateAlbum.php. Such manipulation of the...

CVE-2026-10171

A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Adminis

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-31 发布INFO

A flaw has been found in code-projects Visitor Management System 1.0. Affected by this issue is some unknown functionality of the file /vms/php/phone_0.php. This manipulation of...

CVE-2026-10170

A flaw has been found in code-projects Visitor Management System 1.0. Affected by this issue is some unknown functionali

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-31 发布MEDIUM

A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0. The impacted element is the function accounts_report_search of the file application/modules/acco...

CVE-2026-10155

Bdtask Multi-Store Inventory Management System 1.0 的 Accounts Report Handler 组件中存在 SQL 注入漏洞,位于文件 application/modules/acc

历史摘要 · 未重新核验 · NVD

安全公告2026-05-30 发布INFO

MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated...

CVE-2018-25422

MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-30 发布INFO

Yot CMS 3.3.1 contains an SQL injection vulnerability that allows unauthenticated attackers to...

CVE-2018-25425

Yot CMS 3.3.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL que

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-30 发布INFO

Gate Pass Management System 2.1 contains an SQL injection vulnerability that allows...

CVE-2018-25424

Gate Pass Management System 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-30 发布INFO

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers...

CVE-2018-25414

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary S

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-30 发布INFO

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers...

CVE-2018-25413

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary S

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-30 发布INFO

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers...

CVE-2018-25416

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary S

历史摘要 · 未重新核验 · GitHub Advisory