EUVD-2020-3435

Malware in sbrugna...

EUVD-2021-1492

Malware in sbrugna...

EUVD-2019-6309

Malware in sbrugna...

EUVD-2020-1412

Malware in sbrugna...

EUVD-2021-1471

Malware in sbrugna...

EUVD-2005-4853

Malware in sbrugna...

EUVD-2012-1057

Malware in sbrugna...

EUVD-2007-4869

Malware in sbrugna...

EUVD-2021-0988

Malware in sbrugna...

EUVD-2010-4606

Malware in sbrugna...

EUVD-2021-1481

Malware in sbrugna...

EUVD-2021-0485

Malware in sbrugna...

EUVD-2010-4605

Malware in sbrugna...

EUVD-2020-0862

Malware in sbrugna...

EUVD-2007-4879

Malware in sbrugna...

EUVD-2010-4607

Malware in sbrugna...

EUVD-2025-32540

XWiki Platform is vulnerable to HQL injection via wiki and space search REST API...

SQL Injection

Overview org.xwiki.platform:xwiki-platform-oldcore is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of this package are vulnerable to SQL Injection via the orderField parameter in the REST API. An attacker can execute arbitrary HQL...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the orderField parameter in the REST API. An attacker can execute arbitrary HQL statements by injecting crafted input, potentially leading to unauthorized data access or manipulation. Remediation Upgrade...

GHSA-GPRP-H92G-GC2H XWiki Platform is vulnerable to HQL injection via wiki and space search REST API

Impact The REST search URL is vulnerable to HQL injection via the orderField parameter. The specified value is added twice in the query, though, once in the field list for the select and once in the order clause, so it's not that easy to exploit. The part of the query between the two fields can b...