#cwe-89

共收录 2523 条相关情报。

← 返回所有主题
漏洞预警2026-10-22 发布MEDIUM

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: f...

CVE-2026-87938

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log all

来源摘录 · NVD

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affec...

CVE-2026-87936

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai P

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-22 发布INFO

A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/insert.php of the component Insertion Handler. The man...

CVE-2026-114577

A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file adm

历史摘要 · 未重新核验 · NVD

安全公告2026-10-22 发布INFO

oretnom23 php-travel-agency-system Insertion insert.php sql injection

CVE-2026-114577

A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file adm

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134

CVE-2026-87936

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai P

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

CSP log - Critical - SQL Injection - SA-CONTRIB-2026-136

CVE-2026-87938

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log all

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-21 发布INFO

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument ...

CVE-2026-114441

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布HIGH

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomer_id/tic...

CVE-2026-114440

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/del

来源摘录 · NVD

安全公告2026-10-21 发布INFO

oretnom23 php-travel-agency-system update.php sql injection

CVE-2026-114441

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-21 发布INFO

oretnom23 php-travel-agency-system delete.php sql injection

CVE-2026-114440

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/del

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-21 发布INFO

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation o...

CVE-2026-114384

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown funct

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulatio...

CVE-2026-114381

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown funct

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布MEDIUM

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the argumen...

CVE-2026-114380

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID re...

CVE-2026-114378

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the function mysqli_query of the file profile.php. The manipulat...

CVE-2026-114266

A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the fun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布MEDIUM

A weakness has been identified in ProjectWorlds Advanced Library Management System 1.0. This affects the function mysqli_query of the file returned_book_search.php of the compon...

CVE-2026-114265

A weakness has been identified in ProjectWorlds Advanced Library Management System 1.0. This affects the function mysqli

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function save_folder/delete_folder/delete_...

CVE-2026-114256

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. A

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/cu...

CVE-2026-114250

A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This is

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by th...

CVE-2026-114243

A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183

来源摘录 · NVD

安全公告2026-10-21 发布INFO

Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compiler,...

CVE-2026-114081

Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compiler, which concatenates window-f

历史摘要 · 未重新核验 · GitHub Advisory