Cyber Security Daily Radar

#cwe-89

共收录 2526 条相关情报。

← 返回所有主题
漏洞预警2026-08-25 发布INFO

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to generic SQL Injection via Stored 'meta_key' via Event/Location Duplicate Action...

CVE-2026-15023

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to generic SQL Injection

历史摘要 · 未重新核验 · NVD

#cve#cwe-89
安全公告2026-08-25 发布INFO

Unauthenticated SQL Injection in Boost <= 2.0.4 versions.

CVE-2026-32555

Unauthenticated SQL Injection in Boost <= 2.0.4 versions.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-89#severity:critical
安全公告2026-08-25 发布INFO

Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.

CVE-2026-32554

Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-89#severity:critical
漏洞预警2026-08-24 发布INFO

Unauthenticated SQL Injection in Boost <= 2.0.4 versions.

CVE-2026-32555

Unauthenticated SQL Injection in Boost <= 2.0.4 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-89
漏洞预警2026-08-24 发布INFO

Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.

CVE-2026-32554

Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-89
漏洞预警2026-08-24 发布INFO

CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective release lines, FunctionsBuilder::jsonValue() with PostgresDrive...

CVE-2026-77635

CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective releas

历史摘要 · 未重新核验 · NVD

#cve#cwe-89
漏洞预警2026-08-24 发布INFO

A vulnerability was determined in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/ajax.php?action=save_settings. Th...

CVE-2026-78248

A vulnerability was determined in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function

历史摘要 · 未重新核验 · NVD

#cve#cwe-74#cwe-89
漏洞预警2026-08-24 发布INFO

TypeORM's SelectQueryBuilder.distinctOn accepts an array of strings and stores it on the expression map without validation. For PostgreSQL-family drivers, createSelectDistinctEx...

CVE-2026-76848

TypeORM's SelectQueryBuilder.distinctOn accepts an array of strings and stores it on the expression map without validati

历史摘要 · 未重新核验 · NVD

#cve#cwe-89
漏洞预警2026-08-24 发布INFO

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirm_ord...

CVE-2026-78247

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown proc

历史摘要 · 未重新核验 · NVD

#cve#cwe-74#cwe-89
漏洞预警2026-08-24 发布INFO

Author SQL Injection in FluentCRM Pro <= 3.1.12 versions.

CVE-2026-78270

Author SQL Injection in FluentCRM Pro <= 3.1.12 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-89
漏洞预警2026-08-24 发布INFO

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin ...

CVE-2026-78246

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown c

历史摘要 · 未重新核验 · NVD

#cve#cwe-74#cwe-89
漏洞预警2026-08-24 发布INFO

Unauthenticated SQL Injection in Woo Essential <= 4.3.0 versions.

CVE-2026-32551

Unauthenticated SQL Injection in Woo Essential <= 4.3.0 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-89
漏洞预警2026-08-24 发布INFO

Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions.

CVE-2026-32478

Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-89
漏洞预警2026-08-24 发布INFO

Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions.

CVE-2026-32471

Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-89
漏洞预警2026-08-24 发布INFO

A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipul...

CVE-2026-78244

A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown f

历史摘要 · 未重新核验 · NVD

#cve#cwe-74#cwe-89
漏洞预警2026-08-24 发布INFO

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

CVE-2026-78317

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

历史摘要 · 未重新核验 · NVD

#cve#cwe-89
漏洞预警2026-08-24 发布INFO

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

CVE-2026-78316

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

历史摘要 · 未重新核验 · NVD

#cve#cwe-89
漏洞预警2026-08-24 发布INFO

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

CVE-2026-78315

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

历史摘要 · 未重新核验 · NVD

#cve#cwe-89
漏洞预警2026-08-24 发布INFO

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

CVE-2026-78314

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

历史摘要 · 未重新核验 · NVD

#cve#cwe-89
漏洞预警2026-08-24 发布INFO

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to t...

CVE-2026-77994

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Build

历史摘要 · 未重新核验 · NVD

#cve#cwe-89