#cwe-89

共收录 2526 条相关情报。

漏洞预警2026-08-20 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects I...

CVE-2026-74011

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx InfiniteWP

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a PostgREST filter injection vulnerability in the Supabase node's Row Get Many, Delete, and Update operations, which built filte...

CVE-2026-77071

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a PostgREST filter injection vulnerability in the Supabase node's Row G

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Subscriber SQL Injection in eShipper Commerce <= 2.16.13 versions.

CVE-2026-74013

Subscriber SQL Injection in eShipper Commerce <= 2.16.13 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Subscriber SQL Injection in WP w3all phpBB <= 3.0.5 versions.

CVE-2026-73998

Subscriber SQL Injection in WP w3all phpBB <= 3.0.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Unauthenticated SQL Injection in BookingPress Appointment Booking Pro <= 6.0.2 versions.

CVE-2026-68566

Unauthenticated SQL Injection in BookingPress Appointment Booking Pro <= 6.0.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Unauthenticated SQL Injection in Locatoraid Store Locator <= 3.9.72 versions.

CVE-2026-66680

Unauthenticated SQL Injection in Locatoraid Store Locator <= 3.9.72 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Unauthenticated SQL Injection in Directory Pro <= 2.5.8 versions.

CVE-2026-66649

Unauthenticated SQL Injection in Directory Pro <= 2.5.8 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.

CVE-2026-66609

Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.

CVE-2026-66594

Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Unauthenticated SQL Injection in Security & Malware scan by CleanTalk <= 2.184 versions.

CVE-2026-66593

Unauthenticated SQL Injection in Security & Malware scan by CleanTalk <= 2.184 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 versions.

CVE-2026-66592

Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Unauthenticated SQL Injection in Capella <= 2.5.5 versions.

CVE-2025-15688

Unauthenticated SQL Injection in Capella <= 2.5.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System 0.1. Affected is the function Transaction::getAll of the file application/models/Tran...

CVE-2026-76785

A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System 0.1. Affected is the functio

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-20 发布INFO

A security vulnerability has been detected in DeDeCMS 53_1_UTF8. This vulnerability affects unknown code of the file /plus/advancedsearch.php. Such manipulation of the argument ...

CVE-2026-76783

A security vulnerability has been detected in DeDeCMS 53_1_UTF8. This vulnerability affects unknown code of the file /pl

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

安全公告2026-08-20 发布INFO

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role...

CVE-2026-76364

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Str

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:medium

漏洞预警2026-08-20 发布INFO

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login...

CVE-2026-76764

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of th

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-20 发布INFO

A vulnerability was detected in code-projects Assessment Management 1.0. The affected element is an unknown function of the file /welcome.php. The manipulation of the argument u...

CVE-2026-76762

A vulnerability was detected in code-projects Assessment Management 1.0. The affected element is an unknown function of

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-19 发布INFO

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language (SQL) statements against the Splun...

CVE-2026-76364

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Str

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-19 发布INFO

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structured Que...

CVE-2026-76343

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power"

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-19 发布INFO

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that does not hold the "admin" or "power" Splunk roles could inject Structured Quer...

CVE-2026-76309

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that does not hold the "ad

历史摘要 · 未重新核验 · NVD

#cve #cwe-89