目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1000

100.0%

type:sqli 标签下的 CVE 漏洞 20640

type:sqli 类型相关 20640 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

type:sqli 标签标识 SQL 注入漏洞,指攻击者通过构造恶意输入干扰后端数据库查询逻辑,从而窃取、篡改或销毁数据。该漏洞至关重要,因常导致敏感信息泄露及系统权限沦陷。典型场景包括未过滤的用户输入直接拼接至 SQL 语句,常见于登录表单、搜索框或 URL 参数中,是 Web 应用安全的核心威胁之一。

CVE ID标题CVSS风险等级Published
CVE-2026-42287 Emlog addLog/updateLog SQL注入漏洞 — emlogCWE-89--2026-05-08
CVE-2026-41889 pgx 美元字符串字面量混淆导致SQL注入漏洞 — pgxCWE-89--2026-05-08
CVE-2026-44337 PraisonAI knowledge-store SQL/CQL注入漏洞 — PraisonAICWE-20 6.3 Medium2026-05-08
CVE-2026-41496 PraisonAI 9种对话存储后端SQL注入漏洞 — PraisonAICWE-89 8.1 High2026-05-08
CVE-2026-4935 SureTriggers < 1.1.23 未授权SQL注入漏洞 — OttoKit: All-in-One Automation Platform--2026-05-08
CVE-2026-42208 LiteLLM Proxy API密钥验证SQL注入漏洞 — litellmCWE-89--2026-05-08
CVE-2026-8133 FilePress admin.php SQL注入漏洞 — FilePressCWE-89 7.3 High2026-05-08
CVE-2026-8132 CodeAstro Leave Management System login.php SQL注入漏洞 — Leave Management SystemCWE-89 7.3 High2026-05-08
CVE-2026-8131 SourceCodester SUP Online Shopping replymsg.php SQL注入漏洞 — SUP Online ShoppingCWE-89 7.3 High2026-05-08
CVE-2026-8130 SourceCodester SUP Online Shopping message.php SQL注入漏洞 — SUP Online ShoppingCWE-89 7.3 High2026-05-08
CVE-2026-8129 SourceCodester SUP Online Shopping wishlist.php SQL注入漏洞 — SUP Online ShoppingCWE-89 7.3 High2026-05-08
CVE-2026-8128 SourceCodester SUP Online Shopping viewmsg.php SQL注入漏洞 — SUP Online ShoppingCWE-89 7.3 High2026-05-08
CVE-2026-8126 SourceCodester Comment System post_comment.php SQL注入漏洞 — Comment SystemCWE-89 7.3 High2026-05-08
CVE-2026-8125 Simple Chat System sendMessage.php SQL注入漏洞 — Simple Chat SystemCWE-89 6.3 Medium2026-05-08
CVE-2026-37431 Beauty Parlour Management System v1.1 SQL注入漏洞 — n/a--2026-05-08
CVE-2024-33722 SOPlanning 1.52.00 SQL注入漏洞 — n/a--2026-05-08
CVE-2024-33288 Prison Management System SQL注入漏洞 — n/a--2026-05-08
CVE-2026-8114 JeecgBoot JSON Object loadTreeData SQL注入漏洞 — JeecgBootCWE-89 6.3 Medium2026-05-07
CVE-2026-8098 Feedback System checklogin.php SQL注入漏洞 — Feedback SystemCWE-89 7.3 High2026-05-07
CVE-2026-8097 CodeAstro Online Classroom askquery.php SQL注入漏洞 — Online ClassroomCWE-89 6.3 Medium2026-05-07
CVE-2026-8083 SourceCodester Pharmacy 销售库存系统 sql注入漏洞 — Pharmacy Sales and Inventory SystemCWE-89 7.3 High2026-05-07
CVE-2026-41490 Dagster 数据库I/O管理器SQL注入漏洞 — dagsterCWE-89 8.3 High2026-05-07
CVE-2025-68060 WordPress Team Member插件8.5及以下版本SQL注入漏洞 — Team MemberCWE-89 7.6 High2026-05-07
CVE-2026-41143 YesWiki authenticated SQL Injection via id_fiche in EntryManager::formatDataBeforeSave() — yeswikiCWE-89 8.8 High2026-05-07
CVE-2026-4348 BetterDocs Pro 3.7.0 SQL注入漏洞 — BetterDocs ProCWE-89 7.5 High2026-05-07
CVE-2026-41641 NocoBase sqlCollection:update 缺失 checkSQL 导致 SQL 注入 — nocobaseCWE-89 7.2 High2026-05-07
CVE-2026-41640 NocoBase 递归预加载 SQL注入漏洞 — nocobaseCWE-89 7.5 High2026-05-07
CVE-2026-36458 ChestnutCMS v1.5.10后台SQL注入漏洞 — n/a--2026-05-07
CVE-2026-29090 Rucio postgres_meta DID搜索路径SQL注入漏洞 — rucioCWE-89--2026-05-06
CVE-2026-29080 Rucio DID搜索API过滤引擎Oracle JSON路径SQL注入漏洞 — rucioCWE-89--2026-05-06

type:sqli 是常见的弱点类别,本平台收录该类弱点关联的 20640 条 CVE 漏洞。