#cwe-89

共收录 2592 条相关情报。

← 返回所有主题
漏洞预警2026-04-29 发布INFO

A security vulnerability has been detected in EyouCMS up to 1.7.9. The affected element is the function GetSortData of the file application/common.php. The manipulation of the a...

CVE-2026-7389

A security vulnerability has been detected in EyouCMS up to 1.7.9. The affected element is the function GetSortData of t

历史摘要 · 未重新核验 · NVD

安全公告2026-04-29 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-42646

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Burge TaxoPr

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-29 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Burge TaxoPress simple-tags allows Blind SQL Injection.This issue aff...

CVE-2026-42646

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Burge TaxoPr

历史摘要 · 未重新核验 · NVD

安全公告2026-04-29 发布INFO

SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “...

CVE-2026-3325

SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_comunications/cms/ge

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

A vulnerability was found in code-projects Human Resource Integrated System 1.0. This affects an...

CVE-2025-9740

A vulnerability was found in code-projects Human Resource Integrated System 1.0. This affects an unknown part of the fil

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

A vulnerability was determined in code-projects Human Resource Integrated System 1.0. This...

CVE-2025-9741

A vulnerability was determined in code-projects Human Resource Integrated System 1.0. This vulnerability affects unknown

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue...

CVE-2025-9742

A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue affects some unknown pr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

mod_sql in ProFTPD before 1.3.10rc1 allows remote attackers to execute arbitrary code via a...

CVE-2026-42167

mod_sql in ProFTPD before 1.3.10rc1 allows remote attackers to execute arbitrary code via a username, in scenarios where

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-28 发布INFO

mod_sql in ProFTPD before 1.3.10rc1 allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such...

CVE-2026-42167

mod_sql in ProFTPD before 1.3.10rc1 allows remote attackers to execute arbitrary code via a username, in scenarios where

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function save_category of the file /admin/ajax.php?action=save_category. Such man...

CVE-2026-7268

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function save_category o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects an unknown function of the file /view_prod.php. This manipulation of the argument ID causes sq...

CVE-2026-7267

A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects an unknown function of the file /view

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted element is the function save_order of the file /admin/ajax.php?action=save_order. The m...

CVE-2026-7266

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted element is the function save_o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function Category of the file pizza/index.php?page=categor...

CVE-2026-7265

A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function get_cart_items of the file /admin/ajax.php?action=get_cart_items. Executi...

CVE-2026-7264

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function get_cart_items o

历史摘要 · 未重新核验 · NVD

安全公告2026-04-28 发布INFO

SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute...

CVE-2026-40978

SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via c

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-28 发布INFO

SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs. Affected versions: Spring AI: 1.0.0...

CVE-2026-40978

SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file /cims/modules/admin/reply.php of the component POST Handl...

CVE-2026-7229

A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function get_cart_count of the file /admin/ajax.php?action=get_cart_count. This...

CVE-2026-7228

A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function get_cart_coun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function Login of the file /admin/ajax.php?action=login. The manipulation of the arg...

CVE-2026-7227

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function Login of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This issue affects the function login2 of the file /admin/ajax.php?action=login2. The ...

CVE-2026-7226

A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This issue affects the functi

历史摘要 · 未重新核验 · NVD