4 matches found
CVE-2026-110614
Yiuman citrus through 0.15.0 contains an ORDER BY sql injection vulnerability in the citrus-support generic query framework that allows users to inject SQL via the sortBy request parameter. Attackers can reach any generic list route of controllers extending BaseQueryController or BaseQueryRestful...
CVE-2026-110614
The Yiuman citrus framework (versions through 0.15.0 ) is vulnerable to an ORDER BY SQL Injection within the citrus-support generic query framework. The root cause is the failure to validate the sortBy request parameter, allowing attackers to append unvalidated SQL to the ORDER BY clause. This vu...
EUVD-2026-101242
Yiuman citrus through 0.15.0 contains an ORDER BY sql injection vulnerability in the citrus-support generic query framework that allows users to inject SQL via the sortBy request parameter. Attackers can reach any generic list route of controllers extending BaseQueryController or BaseQueryRestful...
CVE-2026-110614 Yiuman citrus through 0.15.0 ORDER BY SQL Injection via sortBy Parameter
Yiuman citrus through 0.15.0 contains an ORDER BY sql injection vulnerability in the citrus-support generic query framework that allows users to inject SQL via the sortBy request parameter. Attackers can reach any generic list route of controllers extending BaseQueryController or BaseQueryRestful...