#cwe-89

共收录 2545 条相关情报。

← 返回所有主题
漏洞预警2026-08-06 发布INFO

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treatmentrecord.php. The manipulation of...

CVE-2026-19069

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown funct

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /treatmentdetail.php. Executing a manipula...

CVE-2026-19068

A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown functi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /treatment.php. Performing a manipula...

CVE-2026-19067

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipula...

CVE-2026-19062

A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unkn

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL statement, leading to an unauthenticated SQL injection whe...

CVE-2026-3430

The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.

CVE-2026-66447

Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions.

CVE-2026-65569

Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Subscriber SQL Injection in Creative Mail <= 1.6.9 versions.

CVE-2026-65547

Subscriber SQL Injection in Creative Mail <= 1.6.9 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.

CVE-2026-65546

Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.

CVE-2026-65520

Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions.

CVE-2026-65508

Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider. This issue af...

CVE-2026-34191

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Ru

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Loca Software Informatics Technology Ltd. Co. CMS allows SQL Injection. Th...

CVE-2026-5134

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Loca Software Info

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality of the file /classe...

CVE-2026-19021

A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by thi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /servicetype.php. This mani...

CVE-2026-19020

A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unkn

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

The Welcart e-Commerce WordPress plugin before 2.11.32 does not properly sanitise a value taken from an imported CSV file before using it in a SQL statement, allowing users with...

CVE-2026-16065

The Welcart e-Commerce WordPress plugin before 2.11.32 does not properly sanitise a value taken from an imported CSV fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

The WPCargo Track & Trace WordPress plugin before 8.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to p...

CVE-2026-12713

The WPCargo Track & Trace WordPress plugin before 8.0.4 does not properly sanitise and escape a parameter before using i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. The affected element is an unknown function of the file /dm/dispatch/user/fi...

CVE-2026-18970

A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. The affected elemen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

A vulnerability was detected in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c. Affected by this vuln...

CVE-2026-18958

A vulnerability was detected in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a

历史摘要 · 未重新核验 · NVD

安全公告2026-08-04 发布INFO

Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database...

CVE-2026-69704

Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsan

历史摘要 · 未重新核验 · GitHub Advisory