#cwe-89

共收录 2545 条相关情报。

← 返回所有主题
漏洞预警2026-07-13 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects V...

CVE-2026-57385

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appsbd Vitepos vit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file admin/login.php. The manipulation of the ...

CVE-2026-15537

A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /patviewprescription.php. The manipulation of the argumen...

CVE-2026-15536

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/...

CVE-2026-15523

A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some un

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSummarize/PlanGiveOut.aspx. This manipulation of the argument ...

CVE-2026-15517

A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSumma

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This vulnerability affects the function RPCService.query of the file /customizemt/xkq/rpc.jsp of the ...

CVE-2026-15514

A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This vulnerability affects the function RPCS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-12 发布INFO

A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function _rewardPurchase of the file /ipn.php of the component PayPal IPN Payment Handler. The manipulat...

CVE-2026-15502

A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function _rewardPurchase of the file /ipn.php o

历史摘要 · 未重新核验 · NVD

安全公告2026-07-12 发布INFO

Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats...

CVE-2026-56281

Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats endpoint where the limit p

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-12 发布INFO

Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats endpoint where the limit parameter is destructured from unvalidated request body an...

CVE-2026-56281

Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats endpoint where the limit p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-12 发布INFO

A vulnerability was identified in sergomanov SmartHomeAdatum up to cf495353d81b680675eb8d9aa14a318aa45ce12c. This impacts an unknown function of the file users.php of the compon...

CVE-2026-15498

A vulnerability was identified in sergomanov SmartHomeAdatum up to cf495353d81b680675eb8d9aa14a318aa45ce12c. This impact

历史摘要 · 未重新核验 · NVD

安全公告2026-07-12 发布INFO

Capgo - SQL Injection via Unvalidated limit Parameter in Admin Stats Endpoint

CVE-2026-56281

Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats endpoint where the limit p

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-12 发布INFO

A flaw has been found in AMTT Hotel Broadband Operation System 1.0. Impacted is an unknown function of the file manager/network/switch_status.php. Executing a manipulation of th...

CVE-2026-15494

A flaw has been found in AMTT Hotel Broadband Operation System 1.0. Impacted is an unknown function of the file manager/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-12 发布INFO

A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected by this issue is some unknown functionality of the file ...

CVE-2026-15490

A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-12 发布INFO

A vulnerability was identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected by this vulnerability is an unknown functionality of the file...

CVE-2026-15489

A vulnerability was identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected by t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-12 发布INFO

A weakness has been identified in Aster Telecom Azcall 10/11. This issue affects some unknown processing of the file /azcall/adm/gestao_loja/sis.php?t=consultar of the component...

CVE-2026-15482

A weakness has been identified in Aster Telecom Azcall 10/11. This issue affects some unknown processing of the file /az

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-12 发布INFO

A flaw has been found in IceHRM up to 35.0.1. This impacts an unknown function of the file core/src/Reports/User/Reports/EmployeeAttendanceReport.php of the component UserReport...

CVE-2026-15478

A flaw has been found in IceHRM up to 35.0.1. This impacts an unknown function of the file core/src/Reports/User/Reports

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-12 发布INFO

A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /openmrs/ws/rest/v1/bahmnicore/sql of the component Search E...

CVE-2026-15477

A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /op

历史摘要 · 未重新核验 · NVD

安全公告2026-07-12 发布INFO

IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection

CVE-2026-15478

A flaw has been found in IceHRM up to 35.0.1. This impacts an unknown function of the file core/src/Reports/User/Reports

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-12 发布INFO

Bahmni bahmnicore Search Endpoint sql additionalParams sql injection

CVE-2026-15477

A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /op

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-11 发布INFO

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the...

CVE-2026-60090

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowled

历史摘要 · 未重新核验 · GitHub Advisory