#cwe-89

共收录 2560 条相关情报。

漏洞预警2026-05-30 发布INFO

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'q' pa...

CVE-2018-25413

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary S

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-30 发布INFO

MGB OpenSource Guestbook 0.7.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throu...

CVE-2018-25411

MGB OpenSource Guestbook 0.7.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execut

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-30 发布INFO

SIM-PKH 2.4.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter...

CVE-2018-25410

SIM-PKH 2.4.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queri

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-30 发布INFO

eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through pa...

CVE-2018-25407

eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arb

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-30 发布INFO

eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through pa...

CVE-2018-25406

eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arb

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-30 发布INFO

eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through pa...

CVE-2018-25405

eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arb

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-05-30 发布INFO

The GEO my WP plugin for WordPress is vulnerable to SQL Injection via the 'swlatlng' and ...

CVE-2026-9757

The GEO my WP plugin for WordPress is vulnerable to SQL Injection via the 'swlatlng' and 'nelatlng' parameters in all ve

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

漏洞预警2026-05-30 发布INFO

The GEO my WP plugin for WordPress is vulnerable to SQL Injection via the 'swlatlng' and 'nelatlng' parameters in all versions up to, and including, 4.5.5 The parameters are rea...

CVE-2026-9757

The GEO my WP plugin for WordPress is vulnerable to SQL Injection via the 'swlatlng' and 'nelatlng' parameters in all ve

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-30 发布INFO

A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. This impacts an unknown function of the component Login Page. Executing a manipulation of the argument email ca...

CVE-2026-10111

A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. This impacts an unknown function of the component Logi

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-05-30 发布INFO

A vulnerability was detected in code-projects Student Details Management System 1.0. This affects an unknown function of the file /index.php. Performing a manipulation of the ar...

CVE-2026-10110

A vulnerability was detected in code-projects Student Details Management System 1.0. This affects an unknown function of

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

安全公告2026-05-29 发布INFO

stigmem-node's Postgres schema identifier handling required defensive quoting

### Impact Postgres backend schema identifiers were interpolated into SQL strings. In the reviewed code path the schema

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-89 #severity:high

安全公告2026-05-29 发布INFO

AgenticMail API/storage and outbound relay hardening fixes

CVE-2026-47255

The current upstream main branch at commit 7e0206d was reviewed, and the fix-first patch set was rebased on 2026-05-18.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-20 #cwe-89 #cwe-284 #cwe-319

安全公告2026-05-29 发布INFO

ezsystems/ezpublish-legacy has a SQL injection in dfscleanup

CVE-2026-38739

NB: All tags and branches in this repository are past their end of life, so the vulnerability will not be fixed. The adv

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-89 #severity:high

漏洞预警2026-05-29 发布INFO

agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious meta...

CVE-2026-10105

agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inj

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-29 发布INFO

Bolt CMS through 3.7.0 allows SQL Injection in the 'order' parameter of the content listing pages. An authenticated attacker with low-level privileges can exploit this through t...

CVE-2026-39229

Bolt CMS through 3.7.0 allows SQL Injection in the 'order' parameter of the content listing pages. An authenticated atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-29 发布INFO