CVE-2025-45346

CVE-2025-45346 – Bacula-Web 시간 기반 SQL 인젝션 PostgreSQL 버전 추출 📝 개요 취약점 제목 : Bacula-Web에서의 시간 기반 블라인드 SQL 인젝션 제품 : Bacula-Web 영향을 받는 버전 : PostgreSQL 백엔드를 지원하는 버전에서 확인됨 CVE ID : CVE-2025-45346 심각도 : 높음 공격 벡터 : 원격 영향 : 임의 SQL 실행, 정보 노출 🧨 설명 이 개념 증명PoC은 Bacula-Web 의 jobfiles 엔드포인트에서 시간 기반 블라인드 SQL 인젝션...

EUVD-2014-8136

Malware in sbrugna...

EUVD-2025-23037

Malicious code in bioql PyPI...

SQL Injection

bacula-web/bacula-web is vulnerable to SQL Injection. The vulnerability is due to improper input sanitization in HTTP GET requests, which allows an attacker to execute arbitrary code remotely...

CVE-2025-45346

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...

Exploit for SQL Injection in Bacula Bacula-Web

CVE-2025-45346 – Bacula-Web Time-Based SQL Injection PostgreS...

GHSA-HQ25-VP56-QR86 Bacula-web SQL Injection Vulnerability

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...

Bacula-web SQL Injection Vulnerability

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...

SQL Injection

Overview bacula-web/bacula-web is a The open source web based reporting and monitoring tool for Bacula. Affected versions of this package are vulnerable to SQL Injection via the getJobFiles function in the application/Table/JobFileTable.php . An attacker can execute arbitrary code on the server b...

CVE-2025-45346

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...

PT-2025-31257 · Unknown · Bacula-Web

Name of the Vulnerable Software and Affected Versions: Bacula-web versions prior to 9.7.1 Description: A SQL Injection issue exists in Bacula-web. A remote attacker can execute arbitrary code via a crafted HTTP GET request. Recommendations: Update Bacula-web to version 9.7.1 or later...

CVE-2025-45346

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...

Bacula-Web 安全漏洞

Bacula-Web is a web reporting and monitoring tool from Bacula-Web open source. A security vulnerability exists in Bacula-Web versions prior to 9.7.1, which stems from improper handling of HTTP GET requests and could lead to SQL injection attacks...

CVE-2025-45346

Bacula-Web versions prior to v.9.7.1 are vulnerable to a time-based blind SQL injection flaw in the jobfiles endpoint. The root cause is improper input sanitization within the getJobFiles function in the application/Table/JobFileTable.php file. A remote attacker can exploit this by sending a craf...

CVE-2025-45346

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...

CVE-2025-45346

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...

CVE-2014-8295

SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL commands via the jobid parameter...

Bacula-web SQL Injection Vulnerabilities

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server...

GHSA-FV4M-5J2C-787R Bacula-web SQL Injection Vulnerabilities

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server...

FreeBSD : Bacula-Web -- Multiple Vulnerabilities (f05dbd1f-2599-11ec-91be-001b217b3468)

Bacula-Web reports : Address Smarty CVE %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021 Jacques Vidrine and contributors Redistribution and use in source VuXML and...