#cwe-89

共收录 2545 条相关情报。

漏洞预警2026-08-14 发布INFO

Emlog is an open source website building system. In 2.6.20 and earlier, there is a SQL injection vulnerability in the queryDatabase function in ai.php.

CVE-2026-73850

Emlog is an open source website building system. In 2.6.20 and earlier, there is a SQL injection vulnerability in the qu

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-14 发布INFO

Metacat is data repository software that helps researchers preserve, share, and discover data. Metacat versions 2.0.0 through 3.4.0 contain an unauthenticated SQL injection vuln...

CVE-2026-48528

Metacat is data repository software that helps researchers preserve, share, and discover data. Metacat versions 2.0.0 th

历史摘要 · 未重新核验 · NVD

#cve #cwe-89 #cwe-287

漏洞预警2026-08-14 发布INFO

A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database.

CVE-2026-19680

A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from th

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-14 发布INFO

A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized a...

CVE-2026-19631

A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbit

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-14 发布INFO

A security vulnerability has been detected in SourceCodester Simple Client Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=s...

CVE-2026-19825

A security vulnerability has been detected in SourceCodester Simple Client Management System 1.0. The impacted element i

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-14 发布INFO

SiYuan versions <= v3.7.2 contain a SQL injection vulnerability in the backlink/mention search query (kernel/model/backlink.go), which concatenates stored block metadata (title,...

CVE-2026-72811

SiYuan versions <= v3.7.2 contain a SQL injection vulnerability in the backlink/mention search query (kernel/model/backl

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-14 发布INFO

The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'data[queryCon...

CVE-2026-16810

The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is v

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-14 发布INFO

The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its public, unauthenticate...

CVE-2026-15205

The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-14 发布INFO

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versio...

CVE-2026-12743

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-base

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-14 发布INFO

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=save_cargo_type. Executing a ...

CVE-2026-19787

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-14 发布INFO

A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the file modules/Students/includes/Medical.inc.php of the c...

CVE-2026-19785

A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of th

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-14 发布INFO

A weakness has been identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. Executing a manipula...

CVE-2026-19767

A weakness has been identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processin

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

安全公告2026-08-14 发布INFO

francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection

CVE-2026-19785

A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of th

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-74 #cwe-89

漏洞预警2026-08-14 发布INFO

A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Su...

CVE-2026-19764

A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affe

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

安全公告2026-08-14 发布INFO

Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook...

CVE-2026-72851

Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered automations with EXE

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:critical

安全公告2026-08-14 发布INFO

Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector...

CVE-2026-72853

Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector's post-write row lookup

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

漏洞预警2026-08-13 发布INFO

FreePBX is an open source IP PBX. From 16.0.0 until 16.0.11 and 17.0.4, the FreePBX missedcall module places the inbound Caller ID name from crafted SIP From headers into the mi...

CVE-2026-73663

FreePBX is an open source IP PBX. From 16.0.0 until 16.0.11 and 17.0.4, the FreePBX missedcall module places the inbound

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-13 发布INFO

Budibase is an open-source low-code platform. Prior to 3.39.18, packages/server/src/integrations/mysql.ts enabled multipleStatements and inserted an unescaped tableName into a D...

CVE-2026-73408

Budibase is an open-source low-code platform. Prior to 3.39.18, packages/server/src/integrations/mysql.ts enabled multip

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-13 发布INFO

Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector's post-write row lookup that fails to escape table names in identifiers. Attacke...

CVE-2026-72853

Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector's post-write row lookup

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-13 发布INFO

Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered automations with EXECUTE_QUERY steps. Attackers can POST attacker-controlled ...

CVE-2026-72851

Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered automations with EXE

历史摘要 · 未重新核验 · NVD

#cve #cwe-89