#cwe-89

共收录 2526 条相关情报。

← 返回所有主题
漏洞预警2026-09-09 发布INFO

A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is the function update_record of the file include...

CVE-2026-87921

A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-09 发布INFO

A SQL Injection vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote authenticated attackers to execute arbitrary SQL commands via the ${} string concatenation in Ad...

CVE-2026-71808

A SQL Injection vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote authenticated attackers to execute arbi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-09 发布INFO

SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote unauthenticated attackers to execute a...

CVE-2026-79322

SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4

历史摘要 · 未重新核验 · NVD

安全公告2026-09-09 发布INFO

Tanium addressed a SQL injection vulnerability in Comply.

CVE-2026-87034

Tanium addressed a SQL injection vulnerability in Comply.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-08 发布INFO

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-67370

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66820

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66819

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-62895

Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member_list of the file controllers/member.php. This manipulation of t...

CVE-2026-86667

A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member_list o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Movie_Recommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore. This vulnerability allows attackers to access sensitive dat...

CVE-2026-79569

Movie_Recommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore. Th

历史摘要 · 未重新核验 · NVD

安全公告2026-09-08 发布INFO

aircheng-org iWebShop-5 member.php member_list sql injection

CVE-2026-86667

A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member_list o

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-08 发布INFO

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Ser...

CVE-2026-77098

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

The WPML Multilingual CMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘elementIds’ parameter in all versions up to, and including, 4.9.5 due to insuff...

CVE-2026-17509

The WPML Multilingual CMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘elementIds’ parameter

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file /edit.php. The manipulation of the argument ID leads to ...

CVE-2026-86518

A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query of the file /pages/us_searchfrm.php. Executing a manipula...

CVE-2026-86517

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query

历史摘要 · 未重新核验 · NVD

安全公告2026-09-08 发布INFO

SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user...

CVE-2026-44766

SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious in

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-08 发布INFO

SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious input into certain functions, which may be processed by the...

CVE-2026-44766

SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/cust_edit1.php. Such manipulation o...

CVE-2026-86310

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown functi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_searchfrm.php. This manipulation of the argument ID ...

CVE-2026-86309

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /delete_subject.php. Performing a manipu...

CVE-2026-86298

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown func

历史摘要 · 未重新核验 · NVD