#cwe-89

共收录 2560 条相关情报。

漏洞预警2026-05-27 发布INFO

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a table and placing malicious code inside a column identifier. If a su...

CVE-2026-9617

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a table and p

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-fo...

CVE-2026-42761

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 Active

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This i...

CVE-2026-42755

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 TableOn

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Blind SQL Injecti...

CVE-2026-42747

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Eas

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan tainacan allows Blind SQL Injection.This issue affects Ta...

CVE-2026-42740

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows ...

CVE-2026-42730

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStu

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-fo...

CVE-2026-42727

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 Active

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in the Publish Audit API endpoints (/api/auditPublishing/get and /api/auditPublishing/getAll...

CVE-2026-8054

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in the Publish Audit API endpoints

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountData function due to improper neutralization of special elements i...

CVE-2026-40850

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountData func

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the user_alarmprofile view due to improper neutralization of special elements in ...

CVE-2026-40849

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the user_alarmprofile vi

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the tag view due to improper neutralization of special elements in a SQL SELECT c...

CVE-2026-40848

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the tag view due to impr

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system_tag view due to improper neutralization of special elements in a SQL S...

CVE-2026-40847

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system_tag view due

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system view due to improper neutralization of special elements in a SQL SELEC...

CVE-2026-40846

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system view due to i

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the devices_configuration view due to improper neutralization of special elements...

CVE-2026-40845

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the devices_configuratio

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dashboard view due to improper neutralization of special elements in a SQL SE...

CVE-2026-40844

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dashboard view due t

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the alarming view due to improper neutralization of special elements in a SQL SEL...

CVE-2026-40843

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the alarming view due to

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getWidgetTags function due to improper neutralization of special elements in ...

CVE-2026-40842

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getWidgetTags functi

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectTags function due to improper neutralization of special elements in...

CVE-2026-40841

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectTags funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the VerifyCreateLicences function due to improper neutralization of special eleme...

CVE-2026-40840

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the VerifyCreateLicences

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getComponentScalings function due to improper neutralization of special eleme...

CVE-2026-40839

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getComponentScalings

历史摘要 · 未重新核验 · NVD

#cve #cwe-89