Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/02 12:00 a.m.•1 views

CVE-2025-55472: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerability arises due to unsafe handling of user-supplied input in the columns0data parameter, which is directly used in SQL queries without proper validation or parameterization...

6.5CVSS5.9AI score0.00356EPSS
SaveExploits1References1
Rows per page
Query Builder