#cwe-89

共收录 2523 条相关情报。

漏洞预警2026-10-30 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache Fineract (through version 1.15.0). The vulnerability affects ...

CVE-2026-64618

Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache Fine

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-30 发布MEDIUM

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Injection via the 'pgroup' parameter in all versions up to, ...

CVE-2026-118698

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Inj

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-30 发布MEDIUM

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and escape a parameter before using it in a SQL statement, allowing high-privilege us...

CVE-2026-117572

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and escape a parameter befor

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-29 发布INFO

Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook `POST /api/v1/projects/{projectUuid}/dbt-cloud/webhook` ...

CVE-2026-61654

Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-29 发布HIGH

SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database

CVE-2026-11587

SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-89

漏洞预警2026-10-29 发布HIGH

Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions.

CVE-2026-61996

Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions.

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-29 发布HIGH

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows SQL Injection.This issue affects Jet...

CVE-2026-39736

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngi

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-29 发布HIGH

OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerability in the Syndromic Surveillance module that allows users with Clinician-level privileges to read and mod...

CVE-2026-49142

OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerability in the Syndromic Surveillance module that all

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-29 发布HIGH

The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' parameter in all versions up to, and including, 1.5.0 due to insufficient escaping on the u...

CVE-2026-110184

The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' parameter in all versions up to, a

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-29 发布HIGH

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPress buddypress allows Blind SQL Injection.This issue affe...

CVE-2026-115965

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPr

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-29 发布CRITICAL

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Blin...

CVE-2026-115964

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Mot

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-29 发布MEDIUM

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Injection via the 'team_id' parameter in all versions up to,...

CVE-2026-118192

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Inj

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-29 发布INFO

This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the password recovery functionality in the web management int...

CVE-2026-114358

This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-29 发布HIGH

The vTables WordPress plugin before 0.3 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform ...

CVE-2026-89216

The vTables WordPress plugin before 0.3 does not properly sanitise and escape a parameter before using it in a SQL stat

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-29 发布HIGH

The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to generic SQL Injection via the 'exclude_posts' parameter in all ver...

CVE-2026-93904

The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to generic S

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-29 发布HIGH

The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'subscriberid' parameter in all versions up to, and including, 1.26.1.20 due to ...

CVE-2026-93855

The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'subscriberid' paramete

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-28 发布HIGH

AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated streamer login at `objects/login.json.php` passes the `user` parameter to `Streamer::get` in `objects/Str...

CVE-2026-61569

AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated streamer login at `objects/login.json.php` passe

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-28 发布HIGH

OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to version 0.10.0, activity DataGrid date filtering in `ho...

CVE-2026-54455

OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior t

来源摘录 · NVD

#cve #cwe-20 #cwe-89

漏洞预警2026-10-28 发布HIGH

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Advanced Ads GmbH Advanced Ads – Tracking advanced-ads-tracking allows Blin...

CVE-2026-115603

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Advanced Ads GmbH

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-28 发布CRITICAL

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crowd Favorite DXP ToolKit dxp-toolkit allows SQL Injection.This issue affe...

CVE-2026-115607

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crowd Favorite DXP

来源摘录 · NVD

#cve #cwe-89