Lucene search
+L

6 matches found

NVD
NVD
•added 2026/08/10 11:17 a.m.•24 views

CVE-2026-72565

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator...

9.8CVSS0.00684EPSS
SaveExploits0References2
Mend
Mend
•added 2026/08/10 10:40 a.m.•11 views

CVE-2026-72565

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator...

9.8CVSS6.2AI score0.00684EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/10 10:40 a.m.•61 views

CVE-2026-72565 Tencent APIJSON - Unauthenticated SQL Injection via @having Operator Map-Form Bypass

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator...

9.8CVSS0.00684EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/10 10:40 a.m.•21 views

CVE-2026-72565

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator...

9.8CVSS6.2AI score0.00684EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/08/10 10:40 a.m.•31 views

EUVD-2026-55241

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator...

9.8CVSS6.2AI score0.00684EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/10 12:00 a.m.•8 views

CVE-2026-72565: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator...

9.8CVSS6.2AI score0.00684EPSS
SaveExploits0References2
Rows per page
Query Builder