#cwe-89
共收录 2543 条相关情报。
← 返回所有主题 漏洞预警2026-08-15 发布INFO
CVE-2026-18387
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-15 发布INFO
CVE-2026-16586
The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Secon
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-15 发布INFO
CVE-2026-16146
The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQ
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-15 发布INFO
CVE-2026-16094
The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQ
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-15 发布INFO
CVE-2026-15993
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind S
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-15 发布INFO
CVE-2026-15453
The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generic SQL Injection via
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-15 发布INFO
CVE-2026-16080
The Image Uploader for Welcart plugin for WordPress is vulnerable to generic SQL Injection via the 'post_title' paramete
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-15 发布INFO
CVE-2026-15162
The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpress_object_type param
历史摘要 · 未重新核验 · NVD
安全公告2026-08-14 发布INFO
CVE-2026-71571
Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 -
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-08-14 发布INFO
CVE-2026-17227
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due t
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-08-14 发布INFO
CVE-2026-67365
Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injecti
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-08-14 发布INFO
CVE-2026-18403
LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Data
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-14 发布HIGH
CVE-2026-71571
CVE-2026-71571 是 Joomla 扩展 iCagenda 中存在的一个已认证 SQL 注入漏洞。受影响的版本为低于 2.0.0-4.0.11 的 iCagenda 扩展。该漏洞源于 iCagenda 组件中对数字过滤器(num
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-14 发布INFO
CVE-2026-67365
Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injecti
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-14 发布INFO
CVE-2026-17227
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due t
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-14 发布INFO
CVE-2026-18403
LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Data
历史摘要 · 未重新核验 · NVD
安全公告2026-08-14 发布INFO
CVE-2026-19631
A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbit
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-08-14 发布INFO
CVE-2026-19680
A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from th
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-14 发布INFO
CVE-2026-73850
Emlog is an open source website building system. In 2.6.20 and earlier, there is a SQL injection vulnerability in the qu
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-14 发布INFO
CVE-2026-48528
Metacat is data repository software that helps researchers preserve, share, and discover data. Metacat versions 2.0.0 th
历史摘要 · 未重新核验 · NVD