2 matches found
CVE-2026-64880: Improper Neutralization of Special Elements used in an SQL Command
Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access...
7.1CVSS5.8AI score0.00315EPSS
SaveExploits0References3
foxmarks 安全漏洞
foxmarks is an extremely fast, highly extensible and easy to integrate command line read-only interface by zefr0x individual developers. A security vulnerability exists in foxmarks versions prior to v2.1.0, which stems from the presence of insecure privileges that allow a malicious user to read t...
2.4CVSS6.7AI score0.00184EPSS
SaveExploits0References4
20