Lucene search
K

9 matches found

Github Security Blog
Github Security Blog
added 2026/04/07 9:32 p.m.2 views

PowerJob vulnerable to SQL injection

A vulnerability was identified in PowerJob 5.1.0/5.1.1/5.1.2. Impacted is an unknown function of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/InstanceController.java of the component detailPlus Endpoint. The manipulation of the argument...

7.5CVSS5.8AI score0.00048EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2026/04/07 9:32 p.m.0 views

GHSA-4FP2-3XGG-JG4W PowerJob vulnerable to SQL injection

A vulnerability was identified in PowerJob 5.1.0/5.1.1/5.1.2. Impacted is an unknown function of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/InstanceController.java of the component detailPlus Endpoint. The manipulation of the argument...

7.3CVSS6.9AI score0.00048EPSS
Exploits0References7
EUVD
EUVD
added 2026/04/07 9:32 p.m.1 views

EUVD-2026-19893

A vulnerability was identified in PowerJob 5.1.0/5.1.1/5.1.2. Impacted is an unknown function of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/InstanceController.java of the component detailPlus Endpoint. The manipulation of the argument...

7.5CVSS6.9AI score0.00048EPSS
Exploits0References7
Snyk
Snyk
added 2026/04/07 8:13 p.m.0 views

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the customQuery argument in the detailPlus endpoint. An attacker can execute arbitrary SQL commands by supplying crafted input remotely. Remediation There is no fixed version for tech.powerjob:powerjob-server-starter...

7.5CVSS6.2AI score0.00048EPSS
Exploits0References2
NVD
NVD
added 2026/04/07 7:16 p.m.0 views

CVE-2026-5736

A vulnerability was identified in PowerJob 5.1.0/5.1.1/5.1.2. Impacted is an unknown function of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/InstanceController.java of the component detailPlus Endpoint. The manipulation of the argument...

7.5CVSS0.00048EPSS
Exploits0References6
CVE
CVE
added 2026/04/07 6:45 p.m.3 views

CVE-2026-5736

CVE-2026-5736 affects PowerJob 5.1.0/5.1.1/5.1.2. The vulnerability resides in the detailPlus Endpoint component (InstanceController.java under powerjob-server/powerjob-server-starter) where manipulating the argument customQuery leads to SQL injection. This allows remote exploitation and could im...

7.5CVSS6.9AI score0.00048EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/04/07 6:45 p.m.21 views

CVE-2026-5736 PowerJob detailPlus Endpoint InstanceController.java sql injection

A vulnerability was identified in PowerJob 5.1.0/5.1.1/5.1.2. Impacted is an unknown function of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/InstanceController.java of the component detailPlus Endpoint. The manipulation of the argument...

7.5CVSS0.00048EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/04/07 6:45 p.m.1 views

CVE-2026-5736 PowerJob detailPlus Endpoint InstanceController.java sql injection

A vulnerability was identified in PowerJob 5.1.0/5.1.1/5.1.2. Impacted is an unknown function of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/InstanceController.java of the component detailPlus Endpoint. The manipulation of the argument...

7.5CVSS6.9AI score0.00048EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/04/07 12:0 a.m.2 views

PowerJob SQL注入漏洞

PowerJob is an open-source distributed computing and job scheduling framework developed by PowerJob. It allows developers to easily schedule tasks within their applications. Versions 5.1.0, 5.1.1, and 5.1.2 of PowerJob contain SQL injection vulnerabilities. These vulnerabilities stem from incorre...

7.5CVSS7.2AI score0.00048EPSS
Exploits0References7
Rows per page
Query Builder