[webapps] Automotive Shop Management System 1.0 - SQLi

严重 漏洞预警 CVSS 9.3

CVE-2026-62048：Improper Neutralization of Special Elements used in an SQL Command ('S

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects BookIt: from n/a through 2.6.0.6.

NVD · 22 小时前 CVE-2026-62048

高危 漏洞预警

CVE-2026-114625：Arista VeloCloud Orchestrator SQL Injection Vulnerability

Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise th…

CISA KEV · 10-23 CVE-2026-114625

高危 漏洞预警

[webapps] pizzafy-1.0 - SQLi

pizzafy-1.0 - SQLi

Exploit-DB · 10-21

高危 安全事件

Jeecgboot

JeecgBoot 近期被披露存在“权限绕过 + SQL注入”组合漏洞（QVD-2026-56312 / LDYVUL-2026-00170236），CVSS 3.1 评分为 8.6（高危）。该漏洞允许未授权的远程攻击者绕过系统鉴权，通过 SQL 盲注窃取数据库敏感信息，甚至接管系统。

奇安信攻防社区 · 5 天前