Lucene search
+L

6 matches found

NVD
NVD
•added 2026/08/27 1:18 p.m.•19 views

CVE-2026-81674

The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the idambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...

9.3CVSS0.00479EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/27 12:06 p.m.•15 views

CVE-2026-81674 Multiple Vulnerabilities in TOOOLS' iSquad

The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the idambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...

9.3CVSS6AI score0.00479EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/27 12:06 p.m.•17 views

EUVD-2026-67010

The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the idambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...

9.3CVSS5.8AI score0.00479EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/27 12:06 p.m.•30 views

CVE-2026-81674

CVE-2026-81674 affects TOOOLS' iSquad , a web application with a SQL injection vulnerability in the endpoint /ws/apiprensa/getVideoNextPrev via the id_ambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing an attacker to inject arbitrary SQL syntax. The flaw p...

9.3CVSS6AI score0.00479EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/27 12:06 p.m.•45 views

CVE-2026-81674 Multiple Vulnerabilities in TOOOLS' iSquad

The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the idambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...

9.3CVSS0.00479EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/27 12:00 a.m.•8 views

CVE-2026-81674: Improper Neutralization of Special Elements used in an SQL Command

The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the idambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...

9.3CVSS6AI score0.00479EPSS
SaveExploits0References2
Rows per page
Query Builder