CVE-2026-55634: Improper Neutralization of Special Elements used in an SQL Command

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoint /pimcore-studio/api/class/definition/configuration-view/detail/id/import accepts a DataObject field name that is emitted without an identifier allowlist b...

Sahana Agasti 0.6.4 - Multiple Remote File Inclusions

Sahana Agasti = 0.6.4 Multiple Remote File Include By n0n0x Homepage: http://priasantai.uni.cc/ Script site: http://www.sahanafoundation.org/ Download: https://launchpad.net/sahana-agasti/ Bug: 25 global $global; 26 requireonce$global'approot'.'inc/libsecurity/libacl.inc'; 27...