#cwe-89

共收录 2523 条相关情报。

← 返回所有主题
漏洞预警2026-10-12 发布INFO

LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notification_id parameter to notificatio...

CVE-2026-109353

LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability has been found in Exponent CMS up to 3.0.2patch2. Affected is the function userLogin of the file xmlrpc.php of the component XML-RPC. Such manipulation leads to ...

CVE-2026-108900

A vulnerability has been found in Exponent CMS up to 3.0.2patch2. Affected is the function userLogin of the file xmlrpc.

历史摘要 · 未重新核验 · NVD

安全公告2026-10-12 发布INFO

LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.php

CVE-2026-109353

LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-12 发布INFO

LogicalDOC Community Edition through 9.3 contains an HQL injection vulnerability in DocumentsDataServlet that allows authenticated users to manipulate queries via the unvalidate...

CVE-2026-109170

LogicalDOC Community Edition through 9.3 contains an HQL injection vulnerability in DocumentsDataServlet that allows aut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

LogicalDOC Community Edition through 9.3 contains a sql injection vulnerability that allows authenticated users to execute crafted SQL via the firstLetter parameter of TagsDataS...

CVE-2026-109169

LogicalDOC Community Edition through 9.3 contains a sql injection vulnerability that allows authenticated users to execu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the file admin/modules.php of the component Module Configura...

CVE-2026-108829

A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The manip...

CVE-2026-108828

A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen_db_perform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Hand...

CVE-2026-108826

A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen_db_perform in the library includes/modu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of th...

CVE-2026-108824

A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the Tuleap database.

CVE-2026-105412

An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of the file internal/utils/inject.go of the component SQL Va...

CVE-2026-108821

A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in Hybrid Mode. The issue can be triggered by sending ...

CVE-2026-1907

A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operati

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A flaw has been found in SEMCMS up to 5.0. This impacts an unknown function of the file SEMCMS_Banner.php. Executing a manipulation can lead to sql injection. It is possible to ...

CVE-2026-108814

A flaw has been found in SEMCMS up to 5.0. This impacts an unknown function of the file SEMCMS_Banner.php. Executing a m

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was detected in SEMCMS up to 5.0. This affects an unknown function of the file SEMCMS_Download.php. Performing a manipulation results in sql injection. It is pos...

CVE-2026-108813

A vulnerability was detected in SEMCMS up to 5.0. This affects an unknown function of the file SEMCMS_Download.php. Perf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysql_query of the file source/adminr...

CVE-2026-108807

A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This a

历史摘要 · 未重新核验 · NVD

安全公告2026-10-12 发布INFO

SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an...

CVE-2026-109080

SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-12 发布INFO

SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including licens...

CVE-2026-109080

SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysql_query of the ...

CVE-2026-108806

A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysql_query of the f...

CVE-2026-108805

A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Co...

CVE-2026-108799

A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function Pu

历史摘要 · 未重新核验 · NVD