Lucene search
+L

117 matches found

Cvelist
Cvelist
added 2026/02/20 12:00 a.m.36 views

CVE-2026-26745

OpenSourcePOS 3.4.1 has a second order SQL Injection vulnerability in the handling of the currencysymbol configuration field. Although the input is initially stored without immediate execution, it is later concatenated into a dynamically constructed SQL query without proper sanitization or...

0.00299EPSS
SaveExploits1References2
CVE
CVE
added 2026/02/20 12:00 a.m.22 views

CVE-2026-26745

CVE-2026-26745 affects OpenSourcePOS 3.4.1. Affected component: the currency_symbol configuration field. The vulnerability is a second-order SQL Injection where input is stored and later concatenated into a dynamically constructed SQL query without proper sanitization or parameter binding. This c...

5.3CVSS6.1AI score0.00299EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/20 12:00 a.m.17 views

PT-2026-21255

Name of the Vulnerable Software and Affected Versions OpenSourcePOS version 3.4.1 Description The software contains a second order SQL Injection issue in how it handles the currency symbol configuration field. The input is stored and later used in a dynamically constructed SQL query without prope...

5.7AI score0.00299EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/20 12:00 a.m.9 views

CVE-2026-26745

OpenSourcePOS 3.4.1 has a second order SQL Injection vulnerability in the handling of the currencysymbol configuration field. Although the input is initially stored without immediate execution, it is later concatenated into a dynamically constructed SQL query without proper sanitization or...

6.1AI score0.00299EPSS
SaveExploits1References3
OSV
OSV
added 2026/02/20 12:00 a.m.11 views

CVE-2026-26745

OpenSourcePOS 3.4.1 has a second order SQL Injection vulnerability in the handling of the currencysymbol configuration field. Although the input is initially stored without immediate execution, it is later concatenated into a dynamically constructed SQL query without proper sanitization or...

5.3CVSS6.2AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/02/11 7:44 p.m.10 views

CVE-2026-25993

EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application embeds path / requestpath values—derived from the urlkey stored in the database—into SQL statements via string concatenation and passes them to execute. As a result, if a malicio...

9.8CVSS5.8AI score0.0032EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/10 6:16 p.m.13 views

CVE-2026-25993

EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application embeds path / requestpath values—derived from the urlkey stored in the database—into SQL statements via string concatenation and passes them to execute. As a result, if a malicio...

9.8CVSS0.0032EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/10 5:43 p.m.25 views

CVE-2026-25993

EverShop (TypeScript-based eCommerce platform) is affected by a second-order SQL injection during category update/delete handling. The vulnerability stems from embedding path/request_path values, derived from the url_key stored in the database, into SQL statements via string concatenation that ar...

9.8CVSS5.8AI score0.0032EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/02/10 5:43 p.m.34 views

CVE-2026-25993 EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys

EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application embeds path / requestpath values—derived from the urlkey stored in the database—into SQL statements via string concatenation and passes them to execute. As a result, if a malicio...

9.3CVSS0.0032EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/10 5:43 p.m.7 views

CVE-2026-25993 EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys

EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application embeds path / requestpath values—derived from the urlkey stored in the database—into SQL statements via string concatenation and passes them to execute. As a result, if a malicio...

9.3CVSS5.8AI score0.0032EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/10 5:43 p.m.5 views

CVE-2026-25993

EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application embeds path / requestpath values—derived from the urlkey stored in the database—into SQL statements via string concatenation and passes them to execute. As a result, if a malicio...

9.3CVSS5.8AI score0.0032EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/02/10 5:43 p.m.11 views

CVE-2026-25993 EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys

EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application embeds path / requestpath values—derived from the urlkey stored in the database—into SQL statements via string concatenation and passes them to execute. As a result, if a malicio...

9.3CVSS5.8AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/01/23 9:30 a.m.8 views

Hibernate vulnerable to SQL Injection

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...

8.3CVSS6AI score0.00796EPSS
SaveExploits2References10Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/23 6:31 a.m.5 views

CVE-2026-0603

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...

8.3CVSS5.6AI score0.00796EPSS
SaveExploits2References9Affected Software17
Vulnrichment
Vulnrichment
added 2026/01/23 6:31 a.m.11 views

CVE-2026-0603 Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...

8.3CVSS5.7AI score0.00796EPSS
SaveExploits2References8
CVE
CVE
added 2026/01/23 6:31 a.m.195 views

CVE-2026-0603

CVE-2026-0603 : A second-order SQL injection vulnerability in Hibernate Core via the InlineIdsOrClauseBuilder allows a remote attacker with low privileges to craft non-alphanumeric IDs to read sensitive data (e.g., system files) and manipulate or delete data, causing an application‑level denial o...

8.3CVSS5.7AI score0.00796EPSS
SaveExploits2References9
Cvelist
Cvelist
added 2026/01/23 6:31 a.m.67 views

CVE-2026-0603 Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...

8.3CVSS0.00796EPSS
SaveExploits2References8
Positive Technologies
Positive Technologies
added 2026/01/23 12:00 a.m.10 views

PT-2026-4327

Name of the Vulnerable Software and Affected Versions Confluence Data Center versions 6.6.0 through 6.6.0 Confluence Data Center versions 6.13.0 through 6.13.0 Confluence Data Center versions 7.4.0 through 7.4.0 Confluence Data Center versions 7.13.0 through 7.13.0 Confluence Data Center versions...

8.3CVSS5.2AI score0.00796EPSS
SaveExploits2References29
NVD
NVD
added 2025/10/23 6:16 p.m.14 views

CVE-2025-61464

gnuboard gnuboard4 v4.36.04 and before is vulnerable to Second-order SQL Injection via the searchtable in bbs/search.php...

6.5CVSS0.00214EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/10/23 12:00 a.m.21 views

CVE-2025-61464

gnuboard gnuboard4 v4.36.04 and before is vulnerable to Second-order SQL Injection via the searchtable in bbs/search.php...

0.00214EPSS
SaveExploits1References2
Rows per page
Query Builder