#cwe-89

共收录 2592 条相关情报。

漏洞预警2026-05-13 发布INFO

Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a specific interface, potentially enabli...

CVE-2026-6888

Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitr

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-05-13 发布INFO

The Court Reservation – Manage Your Court Bookings Online plugin for WordPress is vulnerable to...

CVE-2026-1250

The Court Reservation – Manage Your Court Bookings Online plugin for WordPress is vulnerable to generic SQL Injection vi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

漏洞预警2026-05-12 发布INFO

The Court Reservation – Manage Your Court Bookings Online plugin for WordPress is vulnerable to generic SQL Injection via the ‘id’ parameter in all versions up to, and including...

CVE-2026-1250

The Court Reservation – Manage Your Court Bookings Online plugin for WordPress is vulnerable to generic SQL Injection vi

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-12 发布INFO

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authentic...

CVE-2026-44864

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 com

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-12 发布INFO

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authentic...

CVE-2026-44863

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 com

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-12 发布INFO

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authentic...

CVE-2026-44862

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 com

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-12 发布INFO

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authentic...

CVE-2026-44861

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 com

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-12 发布INFO

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authentic...

CVE-2026-44860

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 com

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-12 发布INFO

Shelf is a platform for tracking physical assets. From 1.12 to before 1.20.1, a SQL injection vulnerability in the sortBy query parameter on the /assets route allows any authent...

CVE-2026-44204

Shelf is a platform for tracking physical assets. From 1.12 to before 1.20.1, a SQL injection vulnerability in the sortB

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-89

安全公告2026-05-12 发布INFO

SQL injection vulnerability exists in @sap/hdi-deploy package, where SQL queries are dynamically...

CVE-2026-40131

SQL injection vulnerability exists in @sap/hdi-deploy package, where SQL queries are dynamically constructed using user

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:low

安全公告2026-05-12 发布INFO

SAP S/4HANA (SAP Enterprise Search for ABAP) contains a SQL injection vulnerability that allows...

CVE-2026-34260

SAP S/4HANA (SAP Enterprise Search for ABAP) contains a SQL injection vulnerability that allows an authenticated attacke

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:critical

漏洞预警2026-05-12 发布LOW

SQL injection vulnerability exists in @sap/hdi-deploy package, where SQL queries are dynamically constructed using user input without proper parameterization or prepared stateme...

CVE-2026-40131

CVE-2026-40131 是存在于 @sap/hdi-deploy 软件包中的一个 SQL 注入漏洞。该漏洞源于代码在处理用户输入时，未使用参数化查询或预编译语句，而是动态拼接 SQL 查询语句。攻击者需要具备高权限（PR:H）且能本地

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-12 发布CRITICAL

SAP S/4HANA (SAP Enterprise Search for ABAP) contains a SQL injection vulnerability that allows an authenticated attacker to inject malicious SQL statements through user-control...

CVE-2026-34260

CVE-2026-34260 是 SAP S/4HANA 中 SAP Enterprise Search for ABAP 组件存在的一个严重 SQL 注入漏洞。该漏洞源于应用程序在处理用户可控输入时，未进行充分的验证和净化，直接将其拼接进

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-05-11 发布INFO

Kysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()`

CVE-2026-44635

## Summary Kysely 0.28.12 added a `sanitizeStringLiteral()` call inside `DefaultQueryCompiler.visitJSONPathLeg` (commit

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-22 #cwe-89 #cwe-915 #cwe-1284

漏洞预警2026-05-11 发布INFO

OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export. User-supplied input was interpolated directly into a psql \copy metacommand template withou...

CVE-2026-7816

OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export. User-supplied input was interpolat

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-11 发布INFO

SQL injection vulnerability in pgAdmin 4 Maintenance Tool. Four user-supplied JSON fields (buffer_usage_limit, vacuum_parallel, vacuum_index_cleanup, reindex_tablespace) were c...

CVE-2026-7815

SQL injection vulnerability in pgAdmin 4 Maintenance Tool. Four user-supplied JSON fields (buffer_usage_limit, vacuum_p

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-11 发布INFO

Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend when filtering Compose records by the meta field.This issue affects corteza: 2024.9.8.

CVE-2026-6093

Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend when filtering Compose record

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-05-10 发布INFO

Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the...

CVE-2021-47930

Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handle

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

安全公告2026-05-10 发布INFO

Opencart TMD Vendor System 3.x contains a blind SQL injection vulnerability that allows...

CVE-2021-47928

Opencart TMD Vendor System 3.x contains a blind SQL injection vulnerability that allows unauthenticated attackers to ext

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

安全公告2026-05-10 发布INFO

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows...

CVE-2021-47941

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high