7 matches found
EUVD-2025-4487
Malicious code in bioql PyPI...
CVE-2024-55160
GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the OrderBy parameter at /system/operLog/list...
CVE-2024-55160
The GFast backend management system (a GF-based system by tiger1103) is vulnerable to a SQL injection in versions v2 through v3.2 . The root cause is the improper neutralization of special elements in the OrderBy parameter located at the /system/operLog/list API endpoint. This vulnerability could...
CVE-2024-55159
GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the SortName parameter at /system/loginLog/list...
CVE-2024-55159
GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the SortName parameter at /system/loginLog/list...
CVE-2024-55159
GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the SortName parameter at /system/loginLog/list...
CVE-2024-55159
The GFast backend management system (a Go Frame-based system) versions 2 through 3.2 is vulnerable to a SQL injection vulnerability. The flaw exists in the SortName parameter at the /system/loginLog/list API endpoint. This vulnerability allows for potential exploitation via CWE-89 (Improper Neutr...