Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/27 12:00 a.m.•4 views

CVE-2026-81674: Improper Neutralization of Special Elements used in an SQL Command

The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the idambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...

9.3CVSS6AI score0.00479EPSS
SaveExploits0References2
Rows per page
Query Builder