#cwe-89

共收录 2592 条相关情报。

← 返回所有主题
漏洞预警2026-05-04 发布INFO

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 to before version 7.0.0-rc3, a SQL inj...

CVE-2026-42087

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file /product_expiry/edit-admin.php. Su...

CVE-2026-7746

A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was determined in CodeAstro Online Classroom 1.0. This impacts an unknown function of the file /OnlineClassroom/facultydetails. This manipulation of the argument...

CVE-2026-7745

A vulnerability was determined in CodeAstro Online Classroom 1.0. This impacts an unknown function of the file /OnlineCl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was found in CodeAstro Online Classroom 1.0. This affects an unknown function of the file /OnlineClassroom/addnewstudent. The manipulation of the argument fname ...

CVE-2026-7744

A vulnerability was found in CodeAstro Online Classroom 1.0. This affects an unknown function of the file /OnlineClassro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability has been found in CodeAstro Online Classroom 1.0. The impacted element is an unknown function of the file /OnlineClassroom/studentdetails. The manipulation of th...

CVE-2026-7743

A vulnerability has been found in CodeAstro Online Classroom 1.0. The impacted element is an unknown function of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A flaw has been found in CodeAstro Online Classroom 1.0. The affected element is an unknown function of the file /OnlineClassroom/facultylogin. Executing a manipulation of the a...

CVE-2026-7742

A flaw has been found in CodeAstro Online Classroom 1.0. The affected element is an unknown function of the file /Online

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/studentlogin. Performing a manipulation of the argum...

CVE-2026-7741

A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClass

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an unknown function of the file get_state.php. The manipulatio...

CVE-2026-7731

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an un

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was determined in Shandong Hoteam Software PDM Product Data Management System up to 8.3.9. This affects the function GetQueryMachineGridOnePageData of the file /...

CVE-2026-7727

A vulnerability was determined in Shandong Hoteam Software PDM Product Data Management System up to 8.3.9. This affects

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0. This vulnerability affects unknown code of the file /index.php. Performing a manipula...

CVE-2026-7716

A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0. This vulnerability affects u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-03 发布INFO

A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Affected by this issue is the function StrUtils.checkSqlInjection of the file StrUtils.java. Performing a man...

CVE-2026-7699

A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Affected by this issue is the function StrUtils.chec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-03 发布INFO

A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected is an unknown function of the file /manager/card/cardhand_submit.php. This manipulation of ...

CVE-2026-7697

A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected is an unknown function of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-03 发布INFO

A vulnerability has been found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. This affects an unknown function of the file /Substation...

CVE-2026-7695

A vulnerability has been found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-03 发布INFO

A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System 1.3.0. The impacted element is an unknown function of the file /Substati...

CVE-2026-7694

A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System 1.3.0. The impa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-03 发布INFO

A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function _checkValForAPI of the file htdocs/expedition/class/expedition.class.php of the compon...

CVE-2026-7688

A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function _checkValForAPI of the file h

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-03 发布INFO

A vulnerability was identified in YunaiV yudao-cloud up to 2026.01. This affects the function getDataBySQL of the file yudao-module-report-biz/src/main/java/io/github/ruoyi/repo...

CVE-2026-7678

A vulnerability was identified in YunaiV yudao-cloud up to 2026.01. This affects the function getDataBySQL of the file y

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-03 发布MEDIUM

A security vulnerability has been detected in youlaitech youlai-boot up to 2.21.1. This affects the function getUserList of the file src/main/java/com/youlai/boot/system/control...

CVE-2026-7672

CVE-2026-7672 是一个影响 youlaitech youlai-boot 至 2.21.1 版本的安全漏洞。该漏洞位于用户管理端点(UserController.java 中的 getUserList 函数),由于对参数 'or

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-02 发布HIGH

A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSummarize/UserSel.aspx. This manipulation of the argument Dept...

CVE-2026-7670

该漏洞存在于 Jinher OA 1.0 版本中,具体位于文件 /C6/JHSoft.Web.PlanSummarize/UserSel.aspx 的未知函数。攻击者可以通过构造恶意的 DeptIDList 参数,向数据库注入任意 SQL

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-02 发布HIGH

A vulnerability was determined in code-projects Online Hospital Management System 1.0. This affects an unknown function of the file /viewappointment.php. This manipulation of th...

CVE-2026-7632

CVE-2026-7632 是存在于 code-projects 在线医院管理系统 1.0 中的一个 SQL 注入漏洞。该漏洞位于 /viewappointment.php 文件中的未明确功能点,攻击者可以通过操纵参数 delid 在后台数

历史摘要 · 未重新核验 · NVD

安全公告2026-05-02 发布INFO

The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'object_ids...

CVE-2026-4062

The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'object_ids' and 'exclude_object_i

历史摘要 · 未重新核验 · GitHub Advisory