#cwe-89

共收录 2524 条相关情报。

← 返回所有主题

漏洞预警2026-09-30 发布INFO

Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could allow an authentic...

CVE-2026-102098

Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-30 发布HIGH

A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=save_enrollment...

CVE-2026-102913

CVE-2026-102913 是 NVD 收录的一则 SQL 注入漏洞, 影响 SourceCodester Car Driving School Management System 1.0。根据公开元数据描述, 问题出在文件 /clas

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-30 发布MEDIUM

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulatio...

CVE-2026-102912

CVE-2026-102912 是 SourceCodester Online Leave Management System 1.0 中被披露的一个 SQL 注入漏洞。该问题影响文件 /admin/?page=reports 中未明确说明

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-30 发布HIGH

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessmen...

CVE-2026-102910

CVE-2026-102910 是 SourceCodester Online Reviewer Management System 1.0 中被披露的一处 SQL 注入漏洞。受影响的是文件 /reviewer_0/admins/asses

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

安全公告2026-09-30 发布INFO

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipher_export convenience function...

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipher_export convenience function can be used to copy the

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:low

漏洞预警2026-09-30 发布HIGH

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/examproper/btn...

CVE-2026-102909

CVE-2026-102909 影响 SourceCodester Online Reviewer Management System 1.0（在线评审/考试管理系统），是一处典型的 Web 应用 SQL 注入漏洞。问题位于文件 /revi

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-30 发布HIGH

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admins/assessments/exa...

CVE-2026-102908

CVE-2026-102908 是 SourceCodester Online Reviewer Management System 1.0 中被确认的一处 SQL 注入漏洞，问题出在文件 /reviewer_0/admins/assess

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-30 发布INFO

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipher_export convenience function can be used to copy the contents of one attached database into another. It is mos...

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipher_export convenience function can be used to copy the

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-09-30 发布INFO

The "supplier_no" parameter used in the business allocation search feature is vulnerable to time...

CVE-2026-72510

The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injecti

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

安全公告2026-09-30 发布INFO

The "reportType" parameter in the product summary report feature within the balancing reports...

CVE-2026-72507

The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

安全公告2026-09-30 发布INFO

The "screenID" parameter in the electronic transaction queue viewer feature within the manual...

CVE-2026-68068

The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is su

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

安全公告2026-09-30 发布INFO

The "pattern" parameter used in search function in the home page of the TMS application is...

CVE-2026-68954

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blin

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

安全公告2026-09-30 发布INFO

The "search" parameter in the view audit logs feature within the utilities section is susceptible...

CVE-2026-63713

The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

漏洞预警2026-09-29 发布INFO

The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection.

CVE-2026-72510

The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injecti

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-29 发布INFO

The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability.

CVE-2026-72507

The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-29 发布INFO

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability.

CVE-2026-68954

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blin

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-29 发布INFO

The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability.

CVE-2026-68068

The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is su

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-29 发布INFO

The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability.

CVE-2026-63713

The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-29 发布INFO

A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function getByIdAndYear of the file CustomHistoricProcessServiceImpl.java of the compon...

CVE-2026-102616

A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function getByIdAndYear of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-29 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL I...

CVE-2026-102796

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wikimedia Foundati

历史摘要 · 未重新核验 · NVD

#cve #cwe-89