#cwe-89

共收录 2526 条相关情报。

漏洞预警2026-09-03 发布INFO

A vulnerability was determined in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function addwishlist of the file /customer/controller.php?action=addwi...

CVE-2026-85205

A vulnerability was determined in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function addw

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-03 发布INFO

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name paramet...

CVE-2026-82526

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitr

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-09-03 发布INFO

Worklenz through 3.0.0 SQL Injection via the sort-field Query Parameter

CVE-2026-25947 · CVE-2026-85388

Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowin

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

漏洞预警2026-09-03 发布INFO

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/c...

CVE-2026-85187

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue i

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-03 发布INFO

Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions.

CVE-2026-84813

Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-03 发布INFO

Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions.

CVE-2026-84768

Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-03 发布INFO

A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of the component WeChat Module. The manipulation of the argum...

CVE-2026-85138

A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of t

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-03 发布INFO

WWBN AVideo contains a SQL injection vulnerability in the sort column parameter of the get.json.php endpoint with APIName=channels that allows unauthenticated attackers to order...

CVE-2026-85155

WWBN AVideo contains a SQL injection vulnerability in the sort column parameter of the get.json.php endpoint with APINam

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-03 发布INFO

Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0 - The cid parameter is used in queries without validation, allowing SQLi vectors.

CVE-2026-78080

Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0 - The cid parameter is used i

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-03 发布INFO

SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admin_double due to improper processing of the values in the ID field included in the selected_grp_dup...

CVE-2026-76176

SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admin_double due to improper processing of th

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-03 发布INFO

SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. Input provided by an authenticated user with operator privileges is...

CVE-2026-76175

SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. Input prov

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-09-03 发布INFO

WWBN AVideo SQL Injection via get.json.php APIName channels

CVE-2026-85155

WWBN AVideo contains a SQL injection vulnerability in the sort column parameter of the get.json.php endpoint with APINam

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

漏洞预警2026-09-02 发布INFO

Craft CMS GraphQL entry mutation resolvers (saveEntry, deleteEntry) read siteIddirectly from$argumentswithout passing throughArgumentManagerprepareArguments(), which is the func...

CVE-2026-79991

Craft CMS GraphQL entry mutation resolvers (saveEntry, deleteEntry) read siteIddirectly from$argumentswithout passing th

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-09-02 发布INFO

Authenticated SQL Injection via nested eager-loading criteria

CVE-2026-79991

Craft CMS GraphQL entry mutation resolvers (saveEntry, deleteEntry) read siteIddirectly from$argumentswithout passing th

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

漏洞预警2026-09-02 发布INFO

Unauthenticated SQL Injection in WCFM Marketplace <= 3.8.1 versions.

CVE-2026-81286

Unauthenticated SQL Injection in WCFM Marketplace <= 3.8.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-02 发布INFO

Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to an authenticated SQ...

CVE-2026-14828

Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus v

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-02 发布INFO

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not sanitise a user supplied list of identifiers before using it in a SQL query, allowing administ...

CVE-2026-82182

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not sanitise a user supplied list of iden

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-02 发布INFO

The Comments WordPress plugin before 7.6.66 does not validate a value used to build a database query, allowing unauthenticated users to inject SQL and read comments they are no...

CVE-2026-19704

The Comments WordPress plugin before 7.6.66 does not validate a value used to build a database query, allowing unauthen

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-02 发布INFO

Baserow 2.3.3 contains a SQL injection vulnerability in the index() formula function. A low-privileged authenticated user who can create or modify formula fields can provide an ...

CVE-2026-19754

Baserow 2.3.3 contains a SQL injection vulnerability in the index() formula function. A low-privileged authenticated use

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-09-02 发布INFO

Baserow 2.3.3 - SQL injection in formula index() JSONB array extraction

CVE-2026-19754

Baserow 2.3.3 contains a SQL injection vulnerability in the index() formula function. A low-privileged authenticated use

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89