Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2026/02/04 3:15 a.m.•22 views

CVE-2025-10878

A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full...

10CVSS5.7AI score0.00678EPSS
SaveExploits2References1
OSV
OSV
•added 2026/02/03 8:15 p.m.•12 views

CVE-2025-10878

A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full...

10CVSS5.9AI score0.00678EPSS
SaveExploits2References2
NVD
NVD
•added 2026/02/03 8:15 p.m.•17 views

CVE-2025-10878

A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full...

10CVSS0.00678EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2026/02/03 12:00 a.m.•24 views

Fikir Odalari AdminPando SQL注入漏洞

Fikir Odalari AdminPando is a backend management system operated by the Turkish company Fikir Odalari. Version 1.0.1 of Fikir Odalari AdminPando before January 26, 2026 contained an SQL injection vulnerability. This vulnerability stemmed from the username and password parameters used in the login...

10CVSS5.9AI score0.00678EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2026/02/03 12:00 a.m.•46 views

CVE-2025-10878

A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full...

10CVSS0.00678EPSS
SaveExploits2References2
EUVD
EUVD
•added 2026/02/03 12:00 a.m.•16 views

EUVD-2025-206676

A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full...

10CVSS5.7AI score0.00678EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2026/02/03 12:00 a.m.•8 views

CVE-2025-10878

A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full...

10CVSS5.9AI score0.00678EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/03 12:00 a.m.•7 views

CVE-2025-10878: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full...

10CVSS5.8AI score0.00678EPSS
SaveExploits2References1
Rows per page
Query Builder