Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:39 p.m.•19 views

CVE-2026-7206

A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extracttojson of the file src/entry.py. Performing a manipulation of the argument outputfilename results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS6.8AI score0.00435EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/04/28 3:31 a.m.•22 views

sqlite-mcp has an Injection issue

A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extracttojson of the file src/entry.py. Performing a manipulation of the argument outputfilename results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS6.8AI score0.00435EPSS
SaveExploits0References9Affected Software1
attackerkb
attackerkb
•added 2026/04/28 12:45 a.m.•6 views

CVE-2026-7206

A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extracttojson of the file src/entry.py. Performing a manipulation of the argument outputfilename results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS7.1AI score0.00435EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/28 12:00 a.m.•0 views

CVE-2026-7206: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extracttojson of the file src/entry.py. Performing a manipulation of the argument outputfilename results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS5.2AI score0.00435EPSS
SaveExploits0References3
Rows per page
Query Builder