PT-2026-57345

New one on the board: CVE-2026-59979. Cross-tenant IDOR in Yosemite-Crew OSS vet practice mgmt. Their security-fix PR added RBAC to the create routes but forgot the update/delete ones so any low-priv user even a patient account could edit or delete another clinic's data. https://t.co/4NobkLLi91...

CVE-2020-8519: Improper Neutralization of Special Elements used in an SQL Command

SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql...

CVE-2020-8520: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql...

PT-2020-6133

Name of the Vulnerable Software and Affected Versions phpzag live add edit delete data tables records with ajax php mysql affected versions not specified Description The issue is related to a lack of protection against SQL query structure exploitation, potentially allowing a remote attacker to...