#cwe-89

共收录 2560 条相关情报。

← 返回所有主题
漏洞预警2026-06-27 发布INFO

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via the 'search' parameter in all versions up to, and inc...

CVE-2026-13331

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor of any published Budibase app reads every document of the backing MongoDB, CouchDB, E...

CVE-2026-54350

Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor of any published Budibase ap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a SQL injection in timestamps functionality. OpenProject baseline compari...

CVE-2026-52785

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a SQL injection

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Sales Representative SQL Injection in Groundhogg <= 4.5 versions.

CVE-2026-57667

Sales Representative SQL Injection in Groundhogg <= 4.5 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.7 versions.

CVE-2026-57663

Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.7 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Contributor SQL Injection in Contest Gallery <= 30.0.0 versions.

CVE-2026-57662

Contributor SQL Injection in Contest Gallery <= 30.0.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Contributor SQL Injection in WP Job Portal <= 2.5.2 versions.

CVE-2026-57653

Contributor SQL Injection in WP Job Portal <= 2.5.2 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions.

CVE-2026-57644

Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Contributor SQL Injection in WP Post Author <= 3.9.1 versions.

CVE-2026-57643

Contributor SQL Injection in WP Post Author <= 3.9.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Contributor SQL Injection in Gallery <= 4.7.8 versions.

CVE-2026-57642

Contributor SQL Injection in Gallery <= 4.7.8 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Contributor SQL Injection in wpForo Forum <= 3.0.9 versions.

CVE-2026-57636

Contributor SQL Injection in wpForo Forum <= 3.0.9 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Administrator SQL Injection in Popup box <= 6.0.1 versions.

CVE-2026-57631

Administrator SQL Injection in Popup box <= 6.0.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Administrator SQL Injection in WP All Import <= 4.0.1 versions.

CVE-2026-57628

Administrator SQL Injection in WP All Import <= 4.0.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Unauthenticated SQL Injection in Advance Product Search <= 1.4.4 versions.

CVE-2026-56070

Unauthenticated SQL Injection in Advance Product Search <= 1.4.4 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions.

CVE-2026-56068

Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions.

CVE-2026-56067

Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Subscriber SQL Injection in Tourfic <= 2.22.5 versions.

CVE-2026-56064

Subscriber SQL Injection in Tourfic <= 2.22.5 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Unauthenticated SQL Injection in Quotes llama <= 3.1.5 versions.

CVE-2026-56062

Unauthenticated SQL Injection in Quotes llama <= 3.1.5 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Unauthenticated SQL Injection in 워드프레스 결제 심플페이 <= 5.5.6 versions.

CVE-2026-56036

Unauthenticated SQL Injection in 워드프레스 결제 심플페이 <= 5.5.6 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Unauthenticated SQL Injection in Library Management System <= 3.5.7 versions.

CVE-2026-56034

Unauthenticated SQL Injection in Library Management System <= 3.5.7 versions.

历史摘要 · 未重新核验 · NVD