Lucene search
+L

5 matches found

Cvelist
Cvelist
added 2026/05/27 7:53 a.m.32 views

CVE-2026-40828 Authenticated SQLi in DeleteSysLogEntry function

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DeleteSysLogEntry function due to improper neutralization of special elements in a SQL DELETE command allowing for reading the whole database and deleting entries in a non critical table. This can...

7CVSS0.00295EPSS
SaveExploits0References1
Rows per page
Query Builder