EUVD-2018-0121

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

SQL injection vulnerability in pycsw before 2.0.2 allows data extraction and database modifications.

Reporter	Title	Published	Views	Family All 14
CNVD	pycsw SQL Injection Vulnerability	15 Nov 201600:00	–	cnvd
CVE	CVE-2016-8640	1 Aug 201818:00	–	cve
Cvelist	CVE-2016-8640	1 Aug 201818:00	–	cvelist
Debian CVE	CVE-2016-8640	1 Aug 201818:00	–	debiancve
Github Security Blog	SQL Injection in pycsw	15 Aug 201820:02	–	github
NVD	CVE-2016-8640	1 Aug 201818:29	–	nvd
OSV	DEBIAN-CVE-2016-8640	1 Aug 201818:29	–	osv
OSV	GHSA-HG4C-RGVM-964G SQL Injection in pycsw	15 Aug 201820:02	–	osv
OSV	PYSEC-2018-98	1 Aug 201818:29	–	osv
OSV	UBUNTU-CVE-2016-8640	1 Aug 201818:29	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "077cda3b-a0d6-3aad-96b5-72bc49467983",
        "vendor": {
          "name": "https://github.com/geopython"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "6c3f7ca6-205c-3382-857c-88025070c73b",
        "product": {
          "name": "pycsw"
        },
        "product_version": "all versions before 2.0.2, 1.10.5 and 1.8.6"
      }
    ]
  }
]

Source	Link
patch-diff	www.patch-diff.githubusercontent.com/raw/geopython/pycsw/pull/474.patch
github	www.github.com/geopython/pycsw/pull/474/files
seclists	www.seclists.org/oss-sec/2016/q4/406
securityfocus	www.securityfocus.com/bid/94302
github	www.github.com/advisories/GHSA-hg4c-rgvm-964g
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-8640
github	www.github.com/geopython/pycsw/commit/522873e5ce48bb9cbd4e7e8168ca881ce709c222
github	www.github.com/geopython/pycsw/commit/69546e13527c82e4f9191769215490381ad511b2
github	www.github.com/geopython/pycsw/commit/daaf09b4b920708a415be3c7f446739661ba3753
github	www.github.com/pypa/advisory-database/tree/main/vulns/pycsw/PYSEC-2018-98.yaml

07 Oct 2025 00:30Current

9.1High risk

Vulners AI Score9.1

CVSS 39.1

CVSS 27.5

EPSS0.00859