#cwe-89
共收录 2592 条相关情报。
← 返回所有主题 漏洞预警2026-04-27 发布INFO
CVE-2026-7088
A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unk
历史摘要 · 未重新核验 · NVD
漏洞预警2026-04-27 发布INFO
CVE-2026-7087
A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown fu
历史摘要 · 未重新核验 · NVD
漏洞预警2026-04-14 发布CRITICAL
CVE-2025-65135
In manikandan580 School-management-system 1.0, a time-based blind SQL injection vulnerability exists in /studentms/admin
来源摘录 · NVD
漏洞预警2026-04-14 发布CRITICAL
CVE-2025-65133
A SQL injection vulnerability exists in the School Management System (version 1.0) by manikandan580. An unauthenticated
来源摘录 · NVD
漏洞预警2026-04-14 发布CRITICAL
CVE-2025-63939
Improper input handling in /Grocery/search_products_itname.php, in anirudhkannan Grocery Store Management System 1.0, al
来源摘录 · NVD
漏洞预警2026-03-27 发布CRITICAL
CVE-2026-27876
A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impac
来源摘录 · NVD
漏洞预警2026-01-23 发布HIGH
CVE-2026-0603
A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerab
来源摘录 · NVD
漏洞预警2026-01-08 发布CRITICAL
CVE-2025-61548
SQL Injection is present on the hfInventoryDistFormID parameter in the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpo
来源摘录 · NVD
漏洞预警2026-01-08 发布CRITICAL
CVE-2025-61246
indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/review_action.php via the proId param
来源摘录 · NVD
漏洞预警2026-01-06 发布HIGH
CVE-2025-59379
DwyerOmega Isensix Advanced Remote Monitoring System (ARMS) 1.5.7 allows an attacker to retrieve sensitive information f
来源摘录 · NVD
漏洞预警2025-12-31 发布MEDIUM
CVE-2023-7331
A vulnerability was detected in PKrystian Full-Stack-Bank up to bf73a0179e3ff07c0d7dc35297cea0be0e5b1317. This vulnerabi
来源摘录 · NVD
漏洞预警2025-12-23 发布CRITICAL
CVE-2025-65354
Improper input handling in /Grocery/search_products_itname.php inPuneethReddyHC event-management 1.0 permits SQL injecti
来源摘录 · NVD
漏洞预警2025-12-23 发布HIGH
CVE-2023-53982
PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_c
来源摘录 · NVD
漏洞预警2025-12-02 发布MEDIUM
CVE-2025-65380
PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username
来源摘录 · NVD
漏洞预警2025-12-02 发布MEDIUM
CVE-2025-65379
PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically,
来源摘录 · NVD
漏洞预警2025-12-02 发布CRITICAL
CVE-2025-65896
SQL injection vulnerability in long2ice assyncmy thru 0.2.10 allows attackers to execute arbitrary SQL commands via craf
来源摘录 · NVD
漏洞预警2025-12-02 发布CRITICAL
CVE-2025-60736
code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter.
来源摘录 · NVD
漏洞预警2025-12-01 发布CRITICAL
CVE-2025-51683
A blind SQL Injection (SQLi) vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL
来源摘录 · NVD
漏洞预警2025-12-01 发布HIGH
CVE-2025-63535
A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The applicati
来源摘录 · NVD
漏洞预警2025-12-01 发布HIGH
CVE-2025-63532
A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the cancel.php component. The applic
来源摘录 · NVD