#cwe-89

共收录 2523 条相关情报。

漏洞预警2026-10-10 发布INFO

The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'display_name' Profile Field (Second-Order) in all versions up to, and including, 1.5.9 d...

CVE-2026-96653

The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'display_name' Profile Field (Se

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-10 发布INFO

The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_month' parameter in all versions up to, and including, 2...

CVE-2026-107712

The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-10 发布INFO

The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by una...

CVE-2026-87781

The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-10 发布INFO

The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-privilege users such as admini...

CVE-2026-104753

The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-10 发布INFO

The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all versions up to, and including, 1.13.2 due to insufficien...

CVE-2026-104023

The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-10 发布INFO

The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to generic SQL Injection via FireBox Form Display C...

CVE-2026-104724

The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulne

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-10-10 发布INFO

In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of...

CVE-2026-108474

In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:critical

漏洞预警2026-10-10 发布INFO

In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions

CVE-2026-108474

In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4...

CVE-2026-108125

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. T

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0.

CVE-2026-108124

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. T

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRa...

CVE-2026-108107

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST e

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include_info values to the /api/loc...

CVE-2026-108100

HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the `GET /api/1.0/tasks` endpoint in ProcessMaker is vulnerable to SQL injection through t...

CVE-2026-107803

ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the `GET /api/1.0/tasks` endpoint

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-10-09 发布INFO

HortusFox before 6.2 SQL Injection via /api/locations/list include_info Parameter

CVE-2026-108100

HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

安全公告2026-10-09 发布INFO

ProcessMaker has SQL injection in the tasks endpoint through the order_by parameter

CVE-2026-107803

ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the `GET /api/1.0/tasks` endpoint

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

漏洞预警2026-10-09 发布INFO

The Testimonials by BestWebSoft WordPress plugin through 1.0.8 does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to app...

CVE-2026-89235

The Testimonials by BestWebSoft WordPress plugin through 1.0.8 does not sanitise and escape a parameter before using it

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MultiNet Interactive AB EduAdmin Booking eduadmin-booking allows Blind SQL ...

CVE-2026-96809

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MultiNet Interacti

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This is...

CVE-2026-96331

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Sear

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.Thi...

CVE-2026-96330

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.Thi...

CVE-2026-96329

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-

历史摘要 · 未重新核验 · NVD

#cve #cwe-89