#cwe-89

共收录 2592 条相关情报。

← 返回所有主题
漏洞预警2025-12-01 发布CRITICAL

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application fails to properly sanitize user-supplied inp...

CVE-2025-63531

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The

来源摘录 · NVD

漏洞预警2025-11-26 发布CRITICAL

OpenCode Systems USSD Gateway OC Release: 5 was discovered to contain a SQL injection vulnerability via the Session ID parameter in the /occontrolpanel/index.php endpoint.

CVE-2025-65236

OpenCode Systems USSD Gateway OC Release: 5 was discovered to contain a SQL injection vulnerability via the Session ID p

来源摘录 · NVD

漏洞预警2025-11-26 发布CRITICAL

OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via the ID parameter in the getSubUsersByProvider function.

CVE-2025-65235

OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via

来源摘录 · NVD

漏洞预警2025-10-27 发布HIGH

AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."

CVE-2023-49440

AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."

来源摘录 · NVD

漏洞预警2024-11-12 发布CRITICAL

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote cod...

CVE-2024-50330

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allow

来源摘录 · NVD

漏洞预警2024-10-21 发布CRITICAL

A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitizati...

CVE-2024-35286

A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to cond

来源摘录 · NVD

漏洞预警2024-08-29 发布CRITICAL

In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to ...

CVE-2024-6671

In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injec

来源摘录 · NVD

漏洞预警2023-08-11 发布HIGH

IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting,...

CVE-2023-39417

IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @e

来源摘录 · NVD

漏洞预警2023-06-01 发布HIGH

SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may exe...

CVE-2023-29154

SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the

来源摘录 · NVD

漏洞预警2023-03-12 发布CRITICAL

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0. Affected by this issue is some unknown functionalit...

CVE-2023-1357

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System

来源摘录 · NVD

漏洞预警2023-02-09 发布CRITICAL

A vulnerability was found in glorylion JFinalOA 1.0.2 and classified as critical. This issue affects some unknown processing of the file src/main/java/com/pointlion/mvc/common/m...

CVE-2023-0758

A vulnerability was found in glorylion JFinalOA 1.0.2 and classified as critical. This issue affects some unknown proces

来源摘录 · NVD

漏洞预警2021-01-12 发布HIGH

Microsoft SQL Elevation of Privilege Vulnerability

CVE-2021-1636

Microsoft SQL Elevation of Privilege Vulnerability

来源摘录 · NVD