Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:39 p.m.•27 views

CVE-2026-7206

A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extracttojson of the file src/entry.py. Performing a manipulation of the argument outputfilename results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS6.8AI score0.00277EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/04/28 3:31 a.m.•64 views

sqlite-mcp has an Injection issue

A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extracttojson of the file src/entry.py. Performing a manipulation of the argument outputfilename results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS6.8AI score0.00277EPSS
SaveExploits0References9Affected Software1
attackerkb
attackerkb
•added 2026/04/28 12:45 a.m.•10 views

CVE-2026-7206

A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extracttojson of the file src/entry.py. Performing a manipulation of the argument outputfilename results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS6.8AI score0.00277EPSS
SaveExploits0References7Affected Software1
osv_cve
osv_cve
•added 2026/04/28 12:45 a.m.•15 views

CVE-2026-7206 dubydu sqlite-mcp entry.py extract_to_json sql injection

A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extracttojson of the file src/entry.py. Performing a manipulation of the argument outputfilename results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

6.9CVSS5.3AI score
SaveExploits0References9
Mend
Mend
•added 2026/04/28 12:45 a.m.•13 views

CVE-2026-7206

A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extracttojson of the file src/entry.py. Performing a manipulation of the argument outputfilename results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS6.8AI score0.00277EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/28 12:00 a.m.•7 views

CVE-2026-7206: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extracttojson of the file src/entry.py. Performing a manipulation of the argument outputfilename results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS6.8AI score0.00277EPSS
SaveExploits0References3
Rows per page
Query Builder