#cwe-89

共收录 2526 条相关情报。

漏洞预警2026-09-07 发布INFO

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/us_edit1.php. Such manipulation of...

CVE-2026-86291

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-07 发布INFO

A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /voting/ajax.php?action=save_category. This manipulation ...

CVE-2026-86290

A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown function of the file

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-07 发布INFO

A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected is an unknown function of the file travel/src...

CVE-2026-86282

A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a13

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-06 发布MEDIUM

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/trans_view.php. The manipulation of the ar...

CVE-2026-86164

CVE-2026-86164 影响 itsourcecode 开发的 Sales and Inventory System 1.0（销售与库存管理系统）。该漏洞位于 /pages/trans_view.php 页面，由于程序未能对请求参数

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-06 发布MEDIUM

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/pro_del.php. The manipulation of the argument ...

CVE-2026-86163

该漏洞存在于 itsourcecode Sales and Inventory System 1.0 版本中。具体而言，/pages/pro_del.php 文件内的某个处理逻辑（未指明具体函数）对参数 'ID' 的输入过滤不严，导致可被操

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-06 发布HIGH

A vulnerability was determined in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /ajax.php?action=login. Executing a manipulation of the a...

CVE-2026-86162

SourceCodester Online Voting System 1.0 被发现存在一个 SQL 注入漏洞，具体位于 '/ajax.php' 文件的登录功能中。该登录接口接收 'Username' 参数，攻击者在未获得任何身份验证的情

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-06 发布HIGH

A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=delete_category. Performing a mani...

CVE-2026-86161

CVE-2026-86161 是 SourceCodester Online Voting System 1.0 中存在的一处 SQL 注入漏洞。该漏洞位于 /ajax.php?action=delete_category 文件中的未知函数

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-06 发布HIGH

A vulnerability has been found in SourceCodester Online Voting System 1.0. The affected element is an unknown function of the file /ajax.php?action=delete_voting. Such manipulat...

CVE-2026-86160

SourceCodester Online Voting System 1.0 存在 SQL 注入漏洞。该漏洞源于 /ajax.php?action=delete_voting 文件中的未知函数对参数 ID 的处理不够严谨，攻击者无需身份验

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-06 发布HIGH

A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of the file /ajax.php?action=save_user. This manipulation of the argument ID ca...

CVE-2026-86159

SourceCodester Online Voting System 1.0 存在 SQL 注入漏洞。该漏洞位于文件 /ajax.php?action=save_user 的未知函数中，攻击者可以通过操纵参数 ID 触发 SQL 注入。攻

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-05 发布HIGH

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki through the latest development branch contains a SQL injection vulnerability in ReactionManager::deleteU...

CVE-2026-52775

CVE-2026-52775 是 YesWiki（一个 PHP 实现的 Wiki 系统）中被发现的一处 SQL 注入漏洞。在 4.6.6 版本之前，包括最新开发分支在内的所有版本中，ReactionManager::deleteUserRe

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-05 发布HIGH

YesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiController::deletePage() interpolates a page tag retrieved from the database into a DELET...

CVE-2026-52771

YesWiki 是一个用 PHP 实现的 wiki 系统，其 4.2.0 至 4.6.6（不含）版本存在一个高危 SQL 注入漏洞。问题出在 ApiController::deletePage() 方法中：程序从数据库读取页面标签（tag）

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-05 发布HIGH

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki’s public Bazar entry-listing APIs are vulnerable to unauthenticated SQL injection in numeric query / que...

CVE-2026-52770

CVE-2026-52770 是 YesWiki（一个基于 PHP 的 wiki 系统）中的安全漏洞。受影响版本为 4.6.6 之前的版本。漏洞位于 YesWiki 公开的 Bazar 条目列表 API 中，具体存在于数字型查询/过滤器参数

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-05 发布MEDIUM

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the recentchanges action (actions/recentchanges.php) accepts a period argument from two disjoint parameter space...

CVE-2026-52763

CVE-2026-52763 是 YesWiki（基于 PHP 的 wiki 系统）4.6.6 之前版本中存在的一个存储型 SQL 注入漏洞。该漏洞位于 recentchanges 动作（actions/recentchanges.php）

历史摘要 · 未重新核验 · NVD

#cve #cwe-89 #cwe-1287

漏洞预警2026-09-04 发布INFO

A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqli_query of the file admin/adduser.php. Executing a manipulation of the argument ...

CVE-2026-85643

A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqli_query of the file adm

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

安全公告2026-09-04 发布INFO

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the...

CVE-2026-82538

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where t

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

漏洞预警2026-09-04 发布INFO

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is pass...

CVE-2026-82538

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where t

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-04 发布INFO

Emlog is an open source website building system. Prior to version 2.6.16, Emlog CMS Pro contains a blind SQL injection in User_Model::getUserDataByLogin(). The $account paramete...

CVE-2026-53756

Emlog is an open source website building system. Prior to version 2.6.16, Emlog CMS Pro contains a blind SQL injection i

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-09-04 发布INFO

Emlog Blind SQL Injection via Authentication Cookie

CVE-2026-53756

Emlog is an open source website building system. Prior to version 2.6.16, Emlog CMS Pro contains a blind SQL injection i

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

安全公告2026-09-04 发布INFO

ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter

CVE-2026-82538

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where t

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

漏洞预警2026-09-04 发布INFO

IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to SQL injection. An unauthenticated attacker can execute arb...

CVE-2026-18658

IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to S

历史摘要 · 未重新核验 · NVD

#cve #cwe-89