#cwe-89

共收录 2523 条相关情报。

漏洞预警2026-10-02 发布INFO

A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /SimplePharmacy-PHP/product/delete.php....

CVE-2026-104614

A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown proce

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-02 发布INFO

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This...

CVE-2026-104613

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown co

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-02 发布INFO

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function get of the file edit_account...

CVE-2026-104609

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unescaped tags attribute into a raw SQL IN clause. Attackers wi...

CVE-2026-104462

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unesca

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains a blind SQL injection vulnerability in the {{newtextsearch}} action because Bazar list option ids are concatenated into SQL REGEXP/LIKE clauses in ...

CVE-2026-104460

YesWiki before 4.6.7 contains a blind SQL injection vulnerability in the {{newtextsearch}} action because Bazar list opt

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar filtertags action, which wraps unescaped filterN attribute tokens in quotes and concatenates them into ...

CVE-2026-104457

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar filtertags action, which wraps unescaped filte

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains a second-order SQL injection vulnerability in AclService::updateRequestWithACL, where a stored username is concatenated unescaped into a read-ACL L...

CVE-2026-104456

YesWiki before 4.6.7 contains a second-order SQL injection vulnerability in AclService::updateRequestWithACL, where a st

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 SQL Injection via nuagetag tags parameter

CVE-2026-104462

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unesca

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 Unauthenticated Blind SQL Injection via newtextsearch

CVE-2026-104460

YesWiki before 4.6.7 contains a blind SQL injection vulnerability in the {{newtextsearch}} action because Bazar list opt

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 SQL Injection via filtertags filterN parameter

CVE-2026-104457

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar filtertags action, which wraps unescaped filte

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 Second-Order SQL Injection via ACL Username

CVE-2026-104456

YesWiki before 4.6.7 contains a second-order SQL injection vulnerability in AclService::updateRequestWithACL, where a st

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

漏洞预警2026-10-02 发布INFO

A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of...

CVE-2026-104606

A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unkn

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-02 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue a...

CVE-2026-80298

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-02 发布INFO

The Event Tickets and Registration plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.29.5 due to in...

CVE-2026-97634

The Event Tickets and Registration plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' paramet

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-02 发布INFO

The Dc Woocommerce Multi Vendor plugin for WordPress is vulnerable to SQL Injection via the 'order_by' parameter of the /multivendorx/v1/compliance/report-abuse REST endpoint in...

CVE-2026-12951

The Dc Woocommerce Multi Vendor plugin for WordPress is vulnerable to SQL Injection via the 'order_by' parameter of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-02 发布INFO

The BuildKit WordPress plugin before 1.0.29 does not properly sanitise and escape data submitted by contributor-level users before storing it and later using it in a SQL query,...

CVE-2026-94298

The BuildKit WordPress plugin before 1.0.29 does not properly sanitise and escape data submitted by contributor-level u

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-02 发布INFO

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer_0/admins/a...

CVE-2026-104123

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-02 发布INFO

A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file admin_reservefilter.php. Such manipulation...

CVE-2026-104053

A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown functi

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-02 发布INFO

A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file admin_reject_completed.php. This manipulat...

CVE-2026-104052

A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown functi

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

安全公告2026-10-02 发布INFO

ClipBucket v5 through 5.5.3-#197 contains an sql injection vulnerability that allows...

CVE-2026-103766

ClipBucket v5 through 5.5.3-#197 contains an sql injection vulnerability that allows authenticated users with ad_manager

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high