#cwe-89

共收录 2545 条相关情报。

← 返回所有主题
漏洞预警2026-08-10 发布INFO

The ProSolution WP Client WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement reachable by unauthenticated visitors, leadin...

CVE-2026-19053

The ProSolution WP Client WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=set_appoin...

CVE-2026-19384

A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unkno

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A vulnerability was determined in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /viewdoctorconsultancycharge.php. This man...

CVE-2026-19364

A vulnerability was determined in itsourcecode Hospital Management System 1.0. The affected element is an unknown functi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affects the function ModelDataImpl.queryDiyFormData of the file /mdiy/form/data/list.do of the component ms-mdi...

CVE-2026-19355

A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affects the function ModelDataImpl.queryDiyFormData of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09. The impacted element is an unknown function of the file controllers/messages/message....

CVE-2026-19354

A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09. The impacted element is an u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected by this vulnerability is the function SelectQuery.from/SelectQuery.build in the librar...

CVE-2026-19351

A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected by this vulnerability is the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /viewdoctor.php. Such manipulation of the a...

CVE-2026-19347

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/comment_count_user.php. The ma...

CVE-2026-19344

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown funct

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a mani...

CVE-2026-19343

A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=delete_ap...

CVE-2026-19231

A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an...

CVE-2026-64636

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to rea

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

CodeIgniter: SQL injection in Query Builder deleteBatch() when used with where() conditions

CVE-2026-63221

### Impact A SQL injection vulnerability exists in the Query Builder's `deleteBatch()` method. When `deleteBatch()` is u

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database.

CVE-2026-64636

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to rea

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /social/ajax.php?action=signup. Performing a manipulation of th...

CVE-2026-19211

A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /socia

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex allows SQL Injection via the :comment option of Postgr...

CVE-2026-66838

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

A vulnerability was found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=login. The manipulation of t...

CVE-2026-19196

A vulnerability was found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly sanitise attacker-supplied data before using ...

CVE-2026-15361

The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does n

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code via the `field` and `order` parameters in paginated list endpoints

CVE-2026-67689

SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code via the `field` and `or

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewappointment.php. This manipulation of the argument delid c...

CVE-2026-19071

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A vulnerability was detected in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewadmin.php. The manipulation of the argument delid ...

CVE-2026-19070

A vulnerability was detected in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the fil

历史摘要 · 未重新核验 · NVD