Lucene search
+L

6 matches found

NVD
NVD
•added 2026/02/27 8:21 p.m.•24 views

CVE-2026-27832

Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a SQL Injection SQLi vulnerability, exploitable through the advancedQueryData parameter comparator field on an authenticated endpoint. The endpoint...

8.8CVSS0.00467EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/27 7:49 p.m.•13 views

CVE-2026-27832

Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a SQL Injection SQLi vulnerability, exploitable through the advancedQueryData parameter comparator field on an authenticated endpoint. The endpoint...

8.8CVSS5.9AI score0.00467EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2026/02/27 7:49 p.m.•15 views

CVE-2026-27832 Group-Office Has Authenticated SQL Injection in advancedQueryData.comparator

Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a SQL Injection SQLi vulnerability, exploitable through the advancedQueryData parameter comparator field on an authenticated endpoint. The endpoint...

7.1CVSS6AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/27 7:49 p.m.•39 views

CVE-2026-27832 Group-Office Has Authenticated SQL Injection in advancedQueryData.comparator

Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a SQL Injection SQLi vulnerability, exploitable through the advancedQueryData parameter comparator field on an authenticated endpoint. The endpoint...

7.1CVSS0.00467EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/27 12:00 a.m.•23 views

GroupOffice SQL injection vulnerability

GroupOffice is an open-source groupware and CRM solution developed by Intermesh. Versions of GroupOffice prior to 26.0.8, 25.0.87, and 6.8.153 contain SQL injection vulnerabilities. These vulnerabilities stem from improper handling of the advancedQueryData parameter, which may lead to SQL injecti...

8.8CVSS5.9AI score0.00467EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/27 12:00 a.m.•9 views

CVE-2026-27832: Improper Neutralization of Special Elements used in an SQL Command

Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a SQL Injection SQLi vulnerability, exploitable through the advancedQueryData parameter comparator field on an authenticated endpoint. The endpoint...

8.8CVSS5.9AI score0.00467EPSS
SaveExploits0References1
Rows per page
Query Builder