#cwe-89

共收录 2525 条相关情报。

漏洞预警2026-09-24 发布INFO

A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax/add_pr...

CVE-2026-96751

A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. T

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-23 发布INFO

A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function strip_data of the file engine/modules/search.php of the component Search M...

CVE-2026-96604

A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function strip_data of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-23 发布INFO

A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulatio...

CVE-2026-96602

A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-23 发布INFO

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of t...

CVE-2026-96601

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

安全公告2026-09-23 发布INFO

ReactPress has SQL injection via dynamic column names in TypeORM query builders

CVE-2026-61685

## Summary ReactPress API list endpoints build TypeORM `QueryBuilder` conditions using unsanitized HTTP query parameter

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-89 #severity:high

安全公告2026-09-23 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-96826

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shazzad Hossain Kh

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

漏洞预警2026-09-23 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shazzad Hossain Khan W4 Post List allows Blind SQL Injection. This issue a...

CVE-2026-96826

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shazzad Hossain Kh

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-23 发布INFO

Unauthenticated SQL Injection in Product Filter by WBW <= 3.1.7 versions.

CVE-2026-95601

Unauthenticated SQL Injection in Product Filter by WBW <= 3.1.7 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-23 发布INFO

Editor SQL Injection in Ultimeter <= 3.0.8 versions.

CVE-2026-95593

Editor SQL Injection in Ultimeter <= 3.0.8 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-23 发布INFO

Subscriber SQL Injection in Tainacan <= 1.2.0 versions.

CVE-2026-95590

Subscriber SQL Injection in Tainacan <= 1.2.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-23 发布INFO

Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions.

CVE-2026-95522

Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-23 发布INFO

Administrator SQL Injection in Email Log <= 2.63 versions.

CVE-2026-94174

Administrator SQL Injection in Email Log <= 2.63 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-23 发布INFO

Contributor SQL Injection in WP EasyCart <= 5.9.4 versions.

CVE-2026-94124

Contributor SQL Injection in WP EasyCart <= 5.9.4 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-23 发布INFO

Contributor SQL Injection in Mollie Forms <= 2.11.0 versions.

CVE-2026-93773

Contributor SQL Injection in Mollie Forms <= 2.11.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-23 发布INFO

Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions.

CVE-2026-93527

Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-23 发布INFO

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to 2.6.25 and 3.0.8, the affected Sulu 2.6 and 3.0 release lines have a Smart Content ...

CVE-2026-92692

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to 2.6.25 and 3.0.8, the affe

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-09-23 发布INFO

Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)

CVE-2026-92692

### Impact An unauthenticated JCR-SQL2 injection exists in the Smart Content category filter of the 2.x content query b

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-89 #severity:medium

安全公告2026-09-23 发布INFO

Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)

CVE-2026-92692

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to 2.6.25 and 3.0.8, the affe

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

漏洞预警2026-09-23 发布INFO

A weakness has been identified in Neethuharii CafeManagement. Impacted is an unknown function of the file CafePortalLogin.php of the component Login Handler. This manipulation o...

CVE-2026-96514

A weakness has been identified in Neethuharii CafeManagement. Impacted is an unknown function of the file CafePortalLogi

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-23 发布INFO

SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests

CVE-2025-63564

SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code

历史摘要 · 未重新核验 · NVD

#cve #cwe-89