#cwe-89

共收录 2525 条相关情报。

← 返回所有主题

漏洞预警2026-09-23 发布INFO

Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated attackers to inject SQL by manipulating the album_id path...

CVE-2026-96673

Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.

CVE-2026-18180

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensi

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-09-23 发布INFO

Photoview through 2.4.0 SQL Injection via album download route

CVE-2026-96673

Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

漏洞预警2026-09-23 发布INFO

Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate request-controlled identifiers and administrator-supplied val...

CVE-2026-96600

Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate requ

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-09-23 发布INFO

Isotope eCommerce through 2.9.10 SQL Injection via Backend Callbacks

CVE-2026-96600

Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate requ

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

漏洞预警2026-09-23 发布INFO

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and...

CVE-2026-86677

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized S

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-23 发布INFO

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vulnerability in Rule Management Search Reports.

CVE-2026-14913

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vu

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-23 发布INFO

The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to time-based SQL Injection via 'log' (Username) Parameter in all versions up to, and including, ...

CVE-2026-93368

The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to time-based SQL Injection via 'log' (U

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-23 发布INFO

The Booking Manager WordPress plugin before 2.1.21 does not sanitize and escape values taken from a fetched external iCalendar feed before using them in a SQL query, allowing a...

CVE-2026-91024

The Booking Manager WordPress plugin before 2.1.21 does not sanitize and escape values taken from a fetched external iC

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-23 发布INFO

The jet-form-builder-stripe-gateway WordPress plugin before 1.1.0 does not sanitise and escape a payment token before using it in a SQL statement, allowing unauthenticated users...

CVE-2022-4997

The jet-form-builder-stripe-gateway WordPress plugin before 1.1.0 does not sanitise and escape a payment token before us

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-09-23 发布INFO

ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo search...

CVE-2026-96272

ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo search endpoint where the quer

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

漏洞预警2026-09-23 发布INFO

A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/backend/commons/src/main/resources/mapper/ChatBotMarketMa...

CVE-2026-95929

A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-23 发布INFO

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer_0/admins/assessments/pretest/exam-...

CVE-2026-95927

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-23 发布INFO

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer_0/admins/assessments/pr...

CVE-2026-95926

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unkno

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

安全公告2026-09-23 发布INFO

iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection

CVE-2026-95929

A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-74 #cwe-89

漏洞预警2026-09-23 发布HIGH

ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo search endpoint where the query parameter is passed unsanitized into SQL WHERE and ORDE...

CVE-2026-96272

ClipBucket v5 是一款开源视频分享与媒体托管平台。根据 NVD 元数据，5.5.3-#182 之前的版本在照片搜索端点（photo search endpoint）中存在盲注型 SQL 注入漏洞：该接口接收的 query 参数未

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-23 发布INFO

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/databan...

CVE-2026-95925

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown fu

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-23 发布INFO

A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/databank/btn_f...

CVE-2026-95924

A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

安全公告2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...

CVE-2026-18137

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL com

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

漏洞预警2026-09-23 发布INFO

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is the function mysqli_query...

CVE-2026-95868

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89