Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/14 2:17 p.m.•14 views

CVE-2026-108065

SQL Injection CWE-89 in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce VERSION — missing allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID...

9.8CVSS0.00854EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/14 1:38 p.m.•14 views

CVE-2026-108065 Unauthenticated SQL Injection in Channel Software WebAlliance eCommerce

SQL Injection CWE-89 in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce VERSION — missing allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID...

9.8CVSS6.2AI score0.00854EPSS
SaveExploits0References1
Rapid7 Blog
Rapid7 Blog
•added 2026/10/14 12:47 p.m.•21 views

Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce

Overview While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered CVE-2026-108065, an SQL Injection vulnerability CWE-89 in Channel Software WebAlliance eCommerce.The exploit allows a malicious actor to read sensitive data from the database, or,...

9.8CVSS6AI score0.00854EPSS
SaveExploits0
osv_go
osv_go
•added 2025/06/12 2:10 p.m.•17 views

GO-2025-3755 CWA-2025-006: wasmd's improper error handling may lead to IBC channel opening despite error in github.com/CosmWasm/wasmd

CWA-2025-006: wasmd's improper error handling may lead to IBC channel opening despite error in github.com/CosmWasm/wasmd...

7AI score
SaveExploits0References3
Packet Storm
Packet Storm
•added 2014/11/07 12:00 a.m.•43 views

JExperts Tecnologia / Channel Software Cross Site Scripting

CVE-2014-8557 - JExperts Tecnologia / Channel Software Cross Site Scripting Issues Vendor Notified: 2014-10-27 INTRODUCTION: The Channel Platform is an enterprise software project management or project management developed by Brazilian company JExperts Technology and present at thousands clients...

4.3CVSS0.5AI score0.01854EPSS
SaveExploits3
Packet Storm
Packet Storm
•added 2014/11/07 12:00 a.m.•49 views

JExperts Tecnologia / Channel Software Privilege Escalation

CVE-2014-8558 - JExperts Tecnologia / Channel Software Escalation Access Issues Vendor Notified: 2014-10-27 INTRODUCTION: The Channel Platform is an enterprise software project management or project management developed by Brazilian company JExperts Technology and present at thousands clients...

6.5CVSS1.3AI score0.01707EPSS
SaveExploits3
Rows per page
Query Builder