#cwe-89

共收录 2526 条相关情报。

漏洞预警2026-09-04 发布INFO

llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer (llmware/resources.py) where filter and lookup values are directly string-interpolated int...

CVE-2026-85689

llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer (llmware/resources.py) where filt

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-09-04 发布INFO

llmware 0.4.6 SQL Injection via unescaped filter values

CVE-2026-85689

llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer (llmware/resources.py) where filt

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

漏洞预警2026-09-04 发布INFO

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Griffin Hive Metastore Module. T...

CVE-2026-52691

** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vul

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-04 发布INFO

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation o...

CVE-2026-85516

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-04 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TAC Information Services Internal and External Trade Inc. GOLDENHORN ONEIT ...

CVE-2026-18198

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TAC Information Se

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-04 发布INFO

DreamMaker developed by Interinfo has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents.

CVE-2026-85540

DreamMaker developed by Interinfo has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-04 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooCommerce allows Blind SQL Injection. This issue affects WooC...

CVE-2026-57777

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooComm

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-04 发布INFO

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not properly validate a pagination parameter before using it in a SQL query, allowing users with administrator privil...

CVE-2026-82186

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not properly validate a pagination parameter before using it

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-04 发布INFO

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument fi...

CVE-2026-85403

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-04 发布INFO

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the ar...

CVE-2026-85402

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-04 发布INFO

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/Pr...

CVE-2026-85399

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-04 发布INFO

A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID l...

CVE-2026-85398

A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-04 发布INFO

A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulation of the argument...

CVE-2026-85397

A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-04 发布INFO

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/inv_del.php. Executing a manipulation of the...

CVE-2026-85383

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-04 发布INFO

A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects the function ChapterModel::s...

CVE-2026-85379

A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814c

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-03 发布INFO

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient_login.php. The manipulation of the ar...

CVE-2026-85225

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code o

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

安全公告2026-09-03 发布INFO

SiYuan: Second-order SSTI to arbitrary SQL via attribute-view template column (queryBlocks): malicious imported package executes SQL on victim kernel

CVE-2026-72807

**CVE:** This vulnerability corresponds to [CVE-2026-72807](https://nvd.nist.gov/vuln/detail/CVE-2026-72807). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-89 #cwe-1336 #severity:high

安全公告2026-09-03 发布INFO

SiYuan: SQL injection in backlink/mention search via unescaped stored and client input (publish mode): first-order (client keyword) and second-order (stored document title) brea...

CVE-2026-72811

**CVE:** This vulnerability corresponds to [CVE-2026-72811](https://nvd.nist.gov/vuln/detail/CVE-2026-72811). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-89 #severity:critical

漏洞预警2026-09-03 发布INFO

R2R through 3.6.6 contains a SQL injection vulnerability that allows unauthenticated attackers to inject SQL predicates into the chunks search query by manipulating the filter k...

CVE-2026-82527

R2R through 3.6.6 contains a SQL injection vulnerability that allows unauthenticated attackers to inject SQL predicates

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-03 发布INFO

Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowing authenticated users to inject arbitrary PostgreSQL expr...

CVE-2026-85388

Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowin

历史摘要 · 未重新核验 · NVD

#cve #cwe-89