#cwe-89

共收录 2523 条相关情报。

← 返回所有主题
漏洞预警2026-10-25 发布HIGH

A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysql_query o...

CVE-2026-116048

A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Aff

来源摘录 · NVD

漏洞预警2026-10-25 发布HIGH

A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqli_connect of the file lsmodal.php. The manipulat...

CVE-2026-115999

A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the funct

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/da...

CVE-2026-115997

A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/

来源摘录 · NVD

安全公告2026-10-24 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-112866

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-24 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-111402

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-23 发布MEDIUM

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 22.04 to before version 26.05, the unauthenticated REST endpo...

CVE-2026-55465

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 22.0

来源摘录 · NVD

漏洞预警2026-10-23 发布MEDIUM

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the legacy RSS servlet (RssResolver, GET /rss/) ac...

CVE-2026-55444

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version

来源摘录 · NVD

漏洞预警2026-10-23 发布MEDIUM

Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti contains an authenticated stored second-order SQL injecti...

CVE-2026-46531

Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti

来源摘录 · NVD

漏洞预警2026-10-23 发布HIGH

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request quer...

CVE-2026-114621

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail acti

来源摘录 · NVD

安全公告2026-10-22 发布INFO

VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote...

CVE-2026-114625

VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privile

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-22 发布CRITICAL

An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify ...

CVE-2026-79858

An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow

来源摘录 · NVD

漏洞预警2026-10-22 发布HIGH

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by registering crafted subscription_filter_keys that bypa...

CVE-2026-115332

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL

来源摘录 · NVD

漏洞预警2026-10-22 发布HIGH

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable metric property_name or cat...

CVE-2026-115331

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL

来源摘录 · NVD

漏洞预警2026-10-22 发布HIGH

JSON-SCADA before 0.65-alpha contains an sql injection vulnerability in opcApi() in src/server_realtime_auth/index.js that allows authenticated users to inject SQL via HistoryRe...

CVE-2026-115328

JSON-SCADA before 0.65-alpha contains an sql injection vulnerability in opcApi() in src/server_realtime_auth/index.js th

来源摘录 · NVD

漏洞预警2026-10-22 发布HIGH

mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by influencing stored memory content. A...

CVE-2026-115324

mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attack

来源摘录 · NVD

漏洞预警2026-10-22 发布HIGH

i-Netsolution Readymade Unilevel Ecommerce MLM (2024-03-15 build) contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries th...

CVE-2024-58393

i-Netsolution Readymade Unilevel Ecommerce MLM (2024-03-15 build) contains an SQL injection vulnerability that allows un

来源摘录 · NVD

漏洞预警2026-10-22 发布HIGH

PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate ORDER BY clauses via the sort parameter. Attackers can s...

CVE-2022-51023

PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate

来源摘录 · NVD

安全公告2026-10-22 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-87938

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-87936

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai P

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk...

CVE-2026-114664

Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk.doctype.event.event.get_

历史摘要 · 未重新核验 · GitHub Advisory