Lucene search
+L

44 matches found

Vulnrichment
Vulnrichment
•added 2026/03/15 9:02 a.m.•8 views

CVE-2026-4173 CodePhiliaX Chat2DB Database Export DMDBManage.java updateProcedure sql injection

A flaw has been found in CodePhiliaX Chat2DB up to 0.3.7. This vulnerability affects the function exportTable/exportTableColumnComment/exportView/exportProcedure/exportTriggers/exportTrigger/updateProcedure of the file DMDBManage.java of the component Database Export Handler. This manipulation...

6.5CVSS6.2AI score0.00316EPSS
SaveExploits0References4
CVE
CVE
•added 2026/03/15 9:02 a.m.•32 views

CVE-2026-4173

CodePhiliaX Chat2DB (≤0.3.7) exposes a SQL injection in DMDBManage.java under Database Export Handler, affecting functions exportTable, exportTableColumnComment, exportView, exportProcedure, exportTriggers, exportTrigger, and updateProcedure. The flaw enables remote exploitation with a proof-of-c...

6.5CVSS6.2AI score0.00316EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/03/15 9:02 a.m.•65 views

CVE-2026-4173 CodePhiliaX Chat2DB Database Export DMDBManage.java updateProcedure sql injection

A flaw has been found in CodePhiliaX Chat2DB up to 0.3.7. This vulnerability affects the function exportTable/exportTableColumnComment/exportView/exportProcedure/exportTriggers/exportTrigger/updateProcedure of the file DMDBManage.java of the component Database Export Handler. This manipulation...

6.5CVSS0.00316EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/03/15 9:02 a.m.•12 views

CVE-2026-4173

A flaw has been found in CodePhiliaX Chat2DB up to 0.3.7. This vulnerability affects the function exportTable/exportTableColumnComment/exportView/exportProcedure/exportTriggers/exportTrigger/updateProcedure of the file DMDBManage.java of the component Database Export Handler. This manipulation...

6.5CVSS5.5AI score0.00316EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/15 12:00 a.m.•16 views

PT-2026-25546

A flaw has been found in CodePhiliaX Chat2DB up to 0.3.7. This vulnerability affects the function exportTable/exportTableColumnComment/exportView/exportProcedure/exportTriggers/exportTrigger/updateProcedure of the file DMDBManage.java of the component Database Export Handler. This manipulation...

6.5CVSS5.5AI score0.00316EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2024-52736

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.0083EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2025-28818

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00313EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/08/21 5:29 p.m.•23 views

CVE-2025-9148

A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7. This affects an unknown function of the file ai/chat2db/server/web/api/controller/data/source/DataSourceController.java of the component JDBC Connection Handler. The manipulation results in sql injection. The attack can be executed...

6.5CVSS7.5AI score0.00313EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/19 5:15 p.m.•37 views

CVE-2025-9148

A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7. This affects an unknown function of the file ai/chat2db/server/web/api/controller/data/source/DataSourceController.java of the component JDBC Connection Handler. The manipulation results in sql injection. The attack can be executed...

6.5CVSS0.00313EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/08/19 5:02 p.m.•41 views

CVE-2025-9148 CodePhiliaX Chat2DB JDBC Connection DataSourceController.java sql injection

A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7. This affects an unknown function of the file ai/chat2db/server/web/api/controller/data/source/DataSourceController.java of the component JDBC Connection Handler. The manipulation results in sql injection. The attack can be executed...

6.5CVSS0.00313EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/08/19 5:02 p.m.•20 views

CVE-2025-9148 CodePhiliaX Chat2DB JDBC Connection DataSourceController.java sql injection

A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7. This affects an unknown function of the file ai/chat2db/server/web/api/controller/data/source/DataSourceController.java of the component JDBC Connection Handler. The manipulation results in sql injection. The attack can be executed...

6.5CVSS7.4AI score0.00313EPSS
SaveExploits0References4
Mend
Mend
•added 2025/08/19 5:02 p.m.•2 views

CVE-2025-9148

A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7. This affects an unknown function of the file ai/chat2db/server/web/api/controller/data/source/DataSourceController.java of the component JDBC Connection Handler. The manipulation results in sql injection. The attack can be executed...

6.5CVSS0.00313EPSS
SaveExploits0References4
CVE
CVE
•added 2025/08/19 5:02 p.m.•57 views

CVE-2025-9148

CVE-2025-9148 affects CodePhiliaX Chat2DB up to 0.3.7, specifically the JDBC Connection Handler’s DataSourceController.java. The vulnerability is a SQL injection in an unknown function of that file, enabling remote exploitation. Public exploits have been disclosed. Multiple sources corroborate re...

6.5CVSS6.2AI score0.00313EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/08/19 12:00 a.m.•25 views

PT-2025-33817 · Unknown · Codephiliax Chat2Db

Name of the Vulnerable Software and Affected Versions: CodePhiliaX Chat2DB versions through 0.3.7 Description: A SQL injection issue exists in the JDBC Connection Handler component of CodePhiliaX Chat2DB. The issue affects an unknown function within the...

6.5CVSS6.7AI score0.00313EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/08/19 12:00 a.m.•20 views

CodePhiliaX Chat2DB 注入漏洞

CodePhiliaX Chat2DB is an AI-driven SQL client from CodePhiliaX open source. CodePhiliaX Chat2DB 0.3.7 and earlier versions have an injection vulnerability that stems from a SQL injection vulnerability in the file DataSourceController.java in the component JDBC Connection Handler...

6.5CVSS7.9AI score0.00313EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/19 12:00 a.m.•4 views

CVE-2025-9148: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7. This affects an unknown function of the file ai/chat2db/server/web/api/controller/data/source/DataSourceController.java of the component JDBC Connection Handler. The manipulation results in sql injection. The attack can be executed...

6.5CVSS5.3AI score0.00313EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:41 a.m.•18 views

CVE-2024-55081

An XML External Entity XXE injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attackers to execute arbitrary code via supplying a crafted XML input...

9.8CVSS9.6AI score0.0083EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/19 5:15 p.m.•48 views

CVE-2024-55081

An XML External Entity XXE injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attackers to execute arbitrary code via supplying a crafted XML input...

9.8CVSS0.0083EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/19 12:00 a.m.•1 views

CVE-2024-55081: Improper Restriction of XML External Entity Reference

An XML External Entity XXE injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attackers to execute arbitrary code via supplying a crafted XML input...

9.8CVSS6.5AI score0.0083EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/19 12:00 a.m.•46 views

CVE-2024-55081

An XML External Entity XXE injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attackers to execute arbitrary code via supplying a crafted XML input...

0.0083EPSS
SaveExploits0References2
Rows per page
Query Builder