CVE-2026-111472

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint...

CVE-2026-111472

An SQL injection vulnerability exists in TSG Profleet within the /cgi-bin/index.php endpoint. An attacker can exploit the ‘Identificación’ parameter via a GET request to perform unauthorized actions, including retrieving, creating, updating, and deleting data from the database. No specific exploi...

EUVD-2026-102826

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint...

CVE-2026-111472 SQL injection in TSG Profleet

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint...

CVE-2026-111472: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint...

CVE-2012-1028: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allows remote attackers to inject arbitrary web script or HTML via the export parameter...

PT-2012-3027

Name of the Vulnerable Software and Affected Versions SimpleGroupware versions prior to 0.743 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the export parameter in the /bin/index.php file. Recommendations For versions prior to 0.74...