PT-2026-26685

A vulnerability was determined in Mindinventory MindSQL up to 0.2.1. The affected element is the function ask db of the file mindsql/core/mindsql core.py. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be...

CVE-2026-4506: Improper Control of Generation of Code

A vulnerability was found in Mindinventory MindSQL up to 0.2.1. Impacted is the function askdb of the file mindsql/core/mindsqlcore.py. Performing a manipulation results in code injection. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was...

PT-2026-26684

Name of the Vulnerable Software and Affected Versions Mindinventory MindSQL versions up to 0.2.1 Description A code injection issue exists in Mindinventory MindSQL. The ask db function within the mindsql/core/mindsql core.py file is susceptible to manipulation, leading to code injection. This iss...

MindSQL SQL注入漏洞

MindSQL is an open-source database interaction and retrieval enhancement generation library developed by MindInventory. Versions of MindSQL 0.2.1 and earlier contained a SQL injection vulnerability. This vulnerability stemmed from the askdb function in the mindsql/core/mindsqlcore.py file, which...

CVE-2026-4507: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Mindinventory MindSQL up to 0.2.1. The affected element is the function askdb of the file mindsql/core/mindsqlcore.py. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be...

MindSQL 代码注入漏洞

MindSQL is an open-source database interaction and retrieval enhancement generation library developed by MindInventory. Versions of MindSQL 0.2.1 and earlier contained a code injection vulnerability. This vulnerability stemmed from the askdb function in the mindsql/core/mindsqlcore.py file, which...