138 matches found
CVE-2025-45346
CVE-2025-45346 – Bacula-Web Time-Based SQL Injection PostgreSQL Version Extraction 📝 Overview Vulnerability Title : Time-Based Blind SQL Injection in Bacula-Web Product : Bacula-Web Versions Affected : Confirmed in versions supporting PostgreSQL backend CVE ID : CVE-2025-45346 Severity : High...
EUVD-2014-8136
Malware in sbrugna...
EUVD-2005-2995
Malware in sbrugna...
EUVD-2012-4365
Malware in sbrugna...
EUVD-2025-23037
Malicious code in bioql PyPI...
SQL Injection
bacula-web/bacula-web is vulnerable to SQL Injection. The vulnerability is due to improper input sanitization in HTTP GET requests, which allows an attacker to execute arbitrary code remotely...
CVE-2025-45346
SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...
Exploit for SQL Injection in Bacula Bacula-Web
CVE-2025-45346 – Bacula-Web Time-Based SQL Injection PostgreS...
Bacula-web SQL Injection Vulnerability
SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...
GHSA-HQ25-VP56-QR86 Bacula-web SQL Injection Vulnerability
SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...
SQL Injection
Overview bacula-web/bacula-web is a The open source web based reporting and monitoring tool for Bacula. Affected versions of this package are vulnerable to SQL Injection via the getJobFiles function in the application/Table/JobFileTable.php . An attacker can execute arbitrary code on the server b...
CVE-2025-45346
SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...
CVE-2025-45346
SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...
CVE-2025-45346
SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...
CVE-2025-45346
Bacula-Web versions prior to v.9.7.1 are vulnerable to a time-based blind SQL injection flaw in the jobfiles endpoint. The root cause is improper input sanitization within the getJobFiles function in the application/Table/JobFileTable.php file. A remote attacker can exploit this by sending a craf...
PT-2025-31257 · Unknown · Bacula-Web
Name of the Vulnerable Software and Affected Versions: Bacula-web versions prior to 9.7.1 Description: A SQL Injection issue exists in Bacula-web. A remote attacker can execute arbitrary code via a crafted HTTP GET request. Recommendations: Update Bacula-web to version 9.7.1 or later...
CVE-2025-45346
SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...
Bacula-Web security vulnerabilities
Bacula-Web is a web reporting and monitoring tool from Bacula-Web open source. A security vulnerability exists in Bacula-Web versions prior to 9.7.1, which stems from improper handling of HTTP GET requests and could lead to SQL injection attacks...
