EUVD-2026-125238

NocoDB before 2026.08.0 contains an incorrect authorization vulnerability that lets base-scoped API tokens act as account-wide credentials because the token's baseid is never stored or checked. Attackers holding a leaked token can read, write and delete records on every base the token owner belon...

CVE-2026-126283

NocoDB versions before 2026.08.0 are vulnerable to an incorrect authorization flaw involving base-scoped API tokens . The root cause is that the system fails to store or verify the base_id associated with these tokens, allowing them to function as account-wide credentials . An attacker who obtain...

EUVD-2009-4846

Malware in sbrugna...

CVE-2009-4883: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQL commands via the 1 baseid or 2 courseid parameter in a search action...

PHPRecipeBook 2.24 - 'base_id' SQL Injection

PHPRecipeBook 2.24 idRemort SQL Injection Vulnerability - + Discovered By d3b4g + script: http://phprecipebook.sourceforge.net/demo/phprecipebook/ + Greetz : str0ke | Inerd | & friends - Follow me on twitter www.twitter.com/schaba About: ------ PHPRecipeBook is a Web-based cookbook with the...