#cwe-89

共收录 2543 条相关情报。

← 返回所有主题
漏洞预警2026-08-15 发布INFO

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via the 'tag_query' parameter in all versions up to, and ...

CVE-2026-18387

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-15 发布INFO

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Second-Order SQL Injection via MultipleFiles Second-Order Payl...

CVE-2026-16586

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Secon

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-15 发布INFO

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQL Injection via Pattern JSON Keys/Values in all versions ...

CVE-2026-16146

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-15 发布INFO

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQL Injection via the 'key' parameter in all versions up to...

CVE-2026-16094

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-15 发布INFO

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via '{username}' Placeholder in Dynamic-Choi...

CVE-2026-15993

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind S

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-15 发布INFO

The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generic SQL Injection via the 'searchTerm' parameter in all versions up to, and inc...

CVE-2026-15453

The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generic SQL Injection via

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-15 发布INFO

The Image Uploader for Welcart plugin for WordPress is vulnerable to generic SQL Injection via the 'post_title' parameter in all versions up to, and including, 1.4.6 due to insu...

CVE-2026-16080

The Image Uploader for Welcart plugin for WordPress is vulnerable to generic SQL Injection via the 'post_title' paramete

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-15 发布INFO

The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpress_object_type parameter of its /wp-json/object-sync-for-salesforce/push/ RES...

CVE-2026-15162

The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpress_object_type param

历史摘要 · 未重新核验 · NVD

安全公告2026-08-14 发布INFO

Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in...

CVE-2026-71571

Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 -

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass...

CVE-2026-17227

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 -...

CVE-2026-67365

Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injecti

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the...

CVE-2026-18403

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Data

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-14 发布HIGH

Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 - Backend operators with permissions to access iCagenda co...

CVE-2026-71571

CVE-2026-71571 是 Joomla 扩展 iCagenda 中存在的一个已认证 SQL 注入漏洞。受影响的版本为低于 2.0.0-4.0.11 的 iCagenda 扩展。该漏洞源于 iCagenda 组件中对数字过滤器(num

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-14 发布INFO

Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injection in mod_icagenda_calendar (iCagenda), reachable via com...

CVE-2026-67365

Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injecti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an ...

CVE-2026-17227

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-14 发布INFO

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant token...

CVE-2026-18403

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Data

历史摘要 · 未重新核验 · NVD

安全公告2026-08-14 发布INFO

A SQL injection vulnerability exists in Security Center that could allow an authenticated...

CVE-2026-19631

A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

A SQL injection vulnerability exists in Security Center that could allow an attacker to access...

CVE-2026-19680

A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from th

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-14 发布INFO

Emlog is an open source website building system. In 2.6.20 and earlier, there is a SQL injection vulnerability in the queryDatabase function in ai.php.

CVE-2026-73850

Emlog is an open source website building system. In 2.6.20 and earlier, there is a SQL injection vulnerability in the qu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-14 发布INFO

Metacat is data repository software that helps researchers preserve, share, and discover data. Metacat versions 2.0.0 through 3.4.0 contain an unauthenticated SQL injection vuln...

CVE-2026-48528

Metacat is data repository software that helps researchers preserve, share, and discover data. Metacat versions 2.0.0 th

历史摘要 · 未重新核验 · NVD