7 matches found
CVE-2024-25722
qanythingkernel/connector/database/mysql/mysqlclient.py in qanything.ai QAnything before 1.2.0 allows SQL Injection...
CVE-2024-25722
creationtimestamp| type| source ---|---|--- 2024-02-11 06:26:52+00:00| seen| https://t.me/ctinow/182693 2025-06-11 20:35:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18136...
CVE-2024-25722
qanythingkernel/connector/database/mysql/mysqlclient.py in qanything.ai QAnything before 1.2.0 allows SQL Injection...
CVE-2024-25722
qanythingkernel/connector/database/mysql/mysqlclient.py in qanything.ai QAnything before 1.2.0 allows SQL Injection...
CVE-2024-25722
Summary (CVE-2024-25722): QAnything before 1.2.0 exposes a SQL injection in the mysql_client.py module (qanything_kernel/connector/database/mysql/mysql_client.py) of the qanything.ai QAnything product. The flaw, caused in the MySQL client code, allows attacker-controlled SQL through the component...
