#cwe-89
共收录 2526 条相关情报。
← 返回所有主题 漏洞预警2026-08-18 发布INFO
CVE-2026-75089
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown fun
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-18 发布INFO
CVE-2026-75088
A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the f
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-18 发布INFO
CVE-2026-75087
A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-18 发布INFO
CVE-2026-75080
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects s
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-18 发布INFO
CVE-2026-75079
A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unkno
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-17 发布INFO
CVE-2026-67854
SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-17 发布INFO
CVE-2026-67917
zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-17 发布INFO
CVE-2026-65822
ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.116.0 and 16.23.0, erpnext/selling/repo
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-17 发布INFO
CVE-2026-64657
Budibase is an open-source low-code platform. Prior to 3.39.19, the PostgreSQL datasource connector in packages/server/s
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-17 发布INFO
CVE-2026-74254
Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vuln
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-17 发布INFO
CVE-2026-50769
The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection (time-based)
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-17 发布MEDIUM
CVE-2026-19973
CVE-2026-19973 是 itsourcecode 开发的医院管理系统(Hospital Management System)1.0 版本中存在的 SQL 注入漏洞。漏洞位于 /viewpaymentreport.php 文件,攻击
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-17 发布MEDIUM
CVE-2026-19972
CVE-2026-19972 是公开披露的一个 SQL 注入漏洞,影响 itsourcecode 公司开发的 Hospital Management System (医院管理系统) 1.0 版本。该漏洞位于系统文件 /viewpatient
历史摘要 · 未重新核验 · NVD
安全公告2026-08-16 发布INFO
CVE-2026-74251
Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (a
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-16 发布INFO
CVE-2026-74251
Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (a
历史摘要 · 未重新核验 · NVD
安全公告2026-08-16 发布INFO
CVE-2026-2497
The Gallery by BestWebSoft plugin for WordPress is vulnerable to SQL Injection via the '_gallery_order_{post_id}' parame
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-16 发布INFO
CVE-2026-2497
The Gallery by BestWebSoft plugin for WordPress is vulnerable to SQL Injection via the '_gallery_order_{post_id}' parame
历史摘要 · 未重新核验 · NVD
安全公告2026-08-16 发布INFO
CVE-2026-17582
The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up to, and including, 9.1.7
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-08-16 发布INFO
CVE-2026-2283
The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id' parameter in all versions u
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-08-16 发布INFO
CVE-2026-9767
The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'or
历史摘要 · 未重新核验 · GitHub Advisory