3 matches found
CVE-2026-108570
A security flaw exists in the Furion .NET Framework (up to version 4.9.9.95) within the View Engine component. Specifically, the RunCompile function in the file framework/Furion/ViewEngine/Engines/ViewEngine.cs fails to properly neutralize special elements used in the template engine when process...
CVE-2026-108569
A SQL injection vulnerability exists in the Furion .NET Framework up to version 4.9.9.92 . The issue is located within the String.Replace function in the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. Specifically, improper handling of the Name argument allows for injection...
EUVD-2026-96875
A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack ...