#cwe-89

共收录 2543 条相关情报。

漏洞预警2026-08-16 发布INFO

The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Parameter in all versions up to, and includi...

CVE-2026-9767

The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'or

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-16 发布INFO

The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id' parameter in all versions up to, and including, 2.1.7. This is due to insufficient e...

CVE-2026-2283

The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id' parameter in all versions u

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-16 发布INFO

A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /vieworder.php. The manipulation of the argument deli...

CVE-2026-19934

A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the f

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-16 发布INFO

The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up to, and including, 9.1.7 via the qcld_sliderhero_duplicate() function. Slide data...

CVE-2026-17582

The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up to, and including, 9.1.7

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-16 发布INFO

The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for WordPress is vulnerable to generic SQL Injection via the 'status' parameter in all ...

CVE-2026-15351

The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for WordPress is vulnerable to

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-16 发布INFO

The Fullscreen Galleria plugin for WordPress is vulnerable to generic SQL Injection via 'href' Attribute in Post Content in all versions up to, and including, 1.6.12 due to insu...

CVE-2026-16079

The Fullscreen Galleria plugin for WordPress is vulnerable to generic SQL Injection via 'href' Attribute in Post Content

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-16 发布INFO

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to generic SQL Injection via 'randon_category' Quiz Option in all versions up to...

CVE-2026-15963

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to generic SQL Injectio

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-16 发布INFO

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additional_params' parameter in all versions up to, and ...

CVE-2026-15602

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-16 发布INFO

A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown function of the file /osrf-gateway-v1 of the component op...

CVE-2026-19926

A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-16 发布INFO

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=delete_supplier. The man...

CVE-2026-19925

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing o

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-16 发布MEDIUM

A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkout_process.php. Executing a manipulation of the argum...

CVE-2026-19923

CVE-2026-19923 是 code-projects Online Shopping System 1.0 中 /checkout_process.php 文件存在的一个 SQL 注入漏洞。该漏洞源于对参数 total_count

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-16 发布MEDIUM

A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipula...

CVE-2026-19921

CVE-2026-19921 是 code-projects 出品的 Online Shopping System 1.0 中的一个 SQL 注入漏洞。漏洞位于 /homeaction.php 文件中，攻击者可以通过操纵 cat_id 参数

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-16 发布MEDIUM

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown function of the file /action.php. This manipulation of the argument proId caus...

CVE-2026-19920

CVE-2026-19920 影响 code-projects Online Shopping System 1.0，这是一个存在漏洞的在线购物系统。漏洞位于 /action.php 文件中，涉及的参数为 proId。攻击者可以通过构造恶意

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-16 发布HIGH

A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an unknown function of the file /login.php of the component Login. The manipulation of the ar...

CVE-2026-19919

该漏洞存在于 code-projects Online Shopping System 1.0 的 /login.php 文件中，属于登录组件的 SQL 注入漏洞。攻击者通过操控 email 参数即可触发，且无需任何身份验证即可从远程发起攻

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-15 发布MEDIUM

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file delete_food_items1.php. Executing a manipulation of ...

CVE-2026-19917

CVE-2026-19917 涉及 code-projects 开发的 Online Food Order System 1.0（在线订餐系统）中的一个安全缺陷。根据 NVD 提供的元数据，受影响的具体位置是 delete_food_ite

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-15 发布INFO

A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHSoft.Web.HrmAttendance/attendance_out_approve.aspx. This manipulation of the a...

CVE-2026-19905

A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHSoft.Web.HrmAttendanc

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-15 发布INFO

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /edit_teacher.php. Executing a ma...

CVE-2026-19899

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unkno

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-15 发布INFO

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewmedicine.php. Performing a manipulation of t...

CVE-2026-19894

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of t

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-15 发布INFO

The WPML Multilingual CMS plugin for WordPress is vulnerable to SQL Injection via the 'sorting' parameter in all versions up to, and including, 4.9.5 due to insufficient escapin...

CVE-2026-12248

The WPML Multilingual CMS plugin for WordPress is vulnerable to SQL Injection via the 'sorting' parameter in all version

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-15 发布INFO

AppFlowy's qcuiknote feature is affected by a SQL injection vulnerability. Authenticated users with access to the feature can inject arbitrary SQL to exfiltrate data in the unde...

CVE-2026-16007

AppFlowy's qcuiknote feature is affected by a SQL injection vulnerability. Authenticated users with access to the featur

历史摘要 · 未重新核验 · NVD

#cve #cwe-89