Lucene search
+L

8 matches found

NVD
NVD
•added 2026/09/21 9:17 p.m.•6 views

CVE-2026-88402

A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via injecting crafted SQL statements...

9.8CVSS0.00468EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/21 12:00 a.m.•5 views

CVE-2026-88402: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via injecting crafted SQL statements...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/21 12:00 a.m.•4 views

PT-2026-96288

Name of the Vulnerable Software and Affected Versions nocobase version 2.1.21 Description A SQL injection issue exists in the checkSQL function, which allows attackers to access sensitive database information by injecting crafted SQL statements. SQL injection is a technique where malicious SQL co...

9.8CVSS5.9AI score0.00468EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/21 12:00 a.m.•9 views

CVE-2026-88402

A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via injecting crafted SQL statements...

5.8AI score0.00468EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/21 12:00 a.m.•22 views

CVE-2026-88402

A SQL injection vulnerability exists in the checkSQL function of nocobase v2.1.21 . This flaw allows an attacker to inject crafted SQL statements to access sensitive database information . The vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9.8, indicating a high impact on confidentia...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/21 12:00 a.m.•35 views

CVE-2026-88402

A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via injecting crafted SQL statements...

0.00468EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/07 4:13 a.m.•11 views

CVE-2026-41641

NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.39, the checkSQL validation function that blocks dangerous SQL keywords e.g., pgreadfile, LOADFILE, dblink is applied on the collections:create and...

7.2CVSS6AI score0.02369EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/22 12:00 a.m.•22 views

PT-2026-34610

Name of the Vulnerable Software and Affected Versions @nocobase/plugin-collection-sql versions prior to 2.0.39 Description An issue exists where the checkSQL validation function, designed to block dangerous SQL keywords such as pg read file, LOAD FILE, and dblink, is not applied to the...

7.2CVSS5.8AI score0.02369EPSS
SaveExploits1References9
Rows per page
Query Builder