2 matches found
GHSA-7XW9-549R-8JRC DIRAC: SQL injection and lack of access control in PilotManager service
Details A number of the functions in PilotManager pass parameters directly through to the database layer, which then does not do any escaping on the parameters. For example setPilotStatus:...
8.5CVSS6.1AI score
SaveExploits0References5
PT-2026-64219
Details A number of the functions in PilotManager pass parameters directly through to the database layer, which then does not do any escaping on the parameters. For example setPilotStatus:...
8.5CVSS5.9AI score
SaveExploits0References6
20