#cwe-89

共收录 2526 条相关情报。

← 返回所有主题
漏洞预警2026-08-24 发布INFO

A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file admin_class.php. The manipulation of the argument Usern...

CVE-2026-78201

A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the file editbooks.php. Executing a manipulation of the argum...

CVE-2026-78200

A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/view_prod.php. Performing a manipulation ...

CVE-2026-78199

A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?a...

CVE-2026-78198

A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. This issue affects

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=save_user...

CVE-2026-78197

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unkn

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/cust_edit.php. The manipulation of th...

CVE-2026-78185

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the functio...

CVE-2026-78182

A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. Th...

CVE-2026-78171

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unkn

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布INFO

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Res...

CVE-2026-78143

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布INFO

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the ...

CVE-2026-78112

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布INFO

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Ha...

CVE-2026-78057

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affect

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布INFO

A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown functionality of the c...

CVE-2026-78056

A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 - The order parameter in list models is used in queries without validation, allowin...

CVE-2026-76602

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 - The order parameter in l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2 - The condition parameter passed to a list filter is concate...

CVE-2026-76571

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2 - T

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerabil...

CVE-2026-76904

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to 2.20.0, pkg/scalers/postgresql_scaler.go constructs libpq-style connection strings from tenant-controlled...

CVE-2026-53572

KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to 2.20.0, pkg/scalers/postgresql_scaler.go constru

历史摘要 · 未重新核验 · NVD

安全公告2026-08-21 发布INFO

GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

CVE-2026-76904

### Summary An SQL Injection Vulnerability has been found when executing OGC Filters with PostGIS DataStore implementat

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-21 发布INFO

Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40 - An SQL injection allowed any contributor-level user to inject own conten...

CVE-2026-76613

Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40 - An SQL injectio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers...

CVE-2026-16959

The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Edito...

CVE-2026-14601

The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in

历史摘要 · 未重新核验 · NVD