#cwe-89

共收录 2526 条相关情报。

← 返回所有主题
漏洞预警2026-09-15 发布INFO

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. Affected by this vulnerability is an unknown functionality of the file ...

CVE-2026-90849

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. Affected by th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the arg...

CVE-2026-90846

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /dets/index.php of the component Login. Performi...

CVE-2026-90844

A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controll...

CVE-2026-90841

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown part of the file doctorlogin.php. E...

CVE-2026-90805

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

Editor SQL Injection in Amelia <= 2.4.9 versions.

CVE-2026-62112

Editor SQL Injection in Amelia <= 2.4.9 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

Editor SQL Injection in Sky Addons for Elementor <= 3.8.4 versions.

CVE-2026-62109

Editor SQL Injection in Sky Addons for Elementor <= 3.8.4 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

SPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability in the public sitemap endpoint where the MySQL escaper spip_mysql_cite() in ecrire/req/mysql.php...

CVE-2026-72708

SPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability in the public sitemap endpoint where th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

The GamiPress plugin for WordPress is vulnerable to authenticated (Subscriber+) SQL Injection via the 'q' parameter of the wpForo integration AJAX selector (action gamipress_wpf...

CVE-2026-15439

The GamiPress plugin for WordPress is vulnerable to authenticated (Subscriber+) SQL Injection via the 'q' parameter of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

NextGen Connect (Mirth Connect) versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could result in disclosur...

CVE-2026-82583

NextGen Connect (Mirth Connect) versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to SQL Injection via the 'addontype' parameter in versions up to, and including, 2.0.16. This is due to i...

CVE-2026-18561

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to SQL Injection via the 'addontype' parameter i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scw_form_fields' parameter array keys of the 'scw_save_form_data' AJAX action in versions up ...

CVE-2026-15462

The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scw_form_fields' parameter array key

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user (ROLE...

CVE-2026-89089

A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versions of OpenNMS Meridi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

FileRun before 2026.3.0 contains a SQL injection vulnerability that allows delegated or simple administrators to execute arbitrary SQL by submitting the description parameter as...

CVE-2026-73698

FileRun before 2026.3.0 contains a SQL injection vulnerability that allows delegated or simple administrators to execute

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Unauthenticated SQL Injection in Verified Reviews (Avis Vérifiés) <= 2.4.6 versions.

CVE-2026-81800

Unauthenticated SQL Injection in Verified Reviews (Avis Vérifiés) <= 2.4.6 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

OpenPanel through commit cd24bb8 contains an SQL injection vulnerability in the analytics filter builder that fails to validate profile.* filter column identifiers before interp...

CVE-2026-88890

OpenPanel through commit cd24bb8 contains an SQL injection vulnerability in the analytics filter builder that fails to v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. ...

CVE-2026-9163

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics Gi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property < 4.1.4 - The property search and listing query builders as...

CVE-2026-78082

Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property <

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL I...

CVE-2026-7188

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Armiya Information

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

A vulnerability was detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This vulnerability affects the function storeCustomerOrderIn...

CVE-2026-87925

A vulnerability was detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Thi

历史摘要 · 未重新核验 · NVD