CVE-2026-111472

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint...

CVE-2026-111472

An SQL injection vulnerability exists in TSG Profleet within the /cgi-bin/index.php endpoint. An attacker can exploit the ‘Identificación’ parameter via a GET request to perform unauthorized actions, including retrieving, creating, updating, and deleting data from the database. No specific exploi...

CVE-2026-111472 SQL injection in TSG Profleet

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint...

CVE-2026-111472 SQL injection in TSG Profleet

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint...

EUVD-2026-102826

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint...

PT-2026-115537

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint...

CVE-2026-111472: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint...

TSG Profleet SQL Injection Vulnerability

Versions of TSG Profleet prior to 16/10/2026 contained an SQL injection vulnerability. This vulnerability stemmed from incorrect handling of the Identificación parameter in the /cgi-bin/index.php file. It could allow SQL injections, and attackers could use GET requests to retrieve, create, update...

CVE-2012-1028: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allows remote attackers to inject arbitrary web script or HTML via the export parameter...

PT-2012-3027

Name of the Vulnerable Software and Affected Versions SimpleGroupware versions prior to 0.743 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the export parameter in the /bin/index.php file. Recommendations For versions prior to 0.74...