Lucene search
+L

11 matches found

NVD
NVD
•added 2026/08/27 1:18 p.m.•21 views

CVE-2026-81672

SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the idvideo parameter. The application does not sanitize input before constructing SQL queries, which results in execution errors when malicious input is provided. The vulnerability exposes...

9.3CVSS0.00479EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/27 1:18 p.m.•16 views

CVE-2026-81673

The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the idvideo and idambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of...

9.3CVSS0.00605EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/27 12:05 p.m.•25 views

CVE-2026-81673

CVE-2026-81673 affects the TOOOLS iSquad application, where the /ws/apitribuna/setVisita endpoint is vulnerable to SQL injection through the id_video and id_ambito parameters. The root cause is the absence of input validation or sanitization before these values are embedded in SQL queries. A remo...

9.3CVSS6.2AI score0.00605EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/27 12:05 p.m.•47 views

CVE-2026-81673 Multiple Vulnerabilities in TOOOLS' iSquad

The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the idvideo and idambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of...

9.3CVSS0.00605EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/27 12:05 p.m.•13 views

EUVD-2026-67008

The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the idvideo and idambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of...

9.3CVSS6.1AI score0.00605EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/27 11:53 a.m.•10 views

CVE-2026-81672 Multiple Vulnerabilities in TOOOLS' iSquad

SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the idvideo parameter. The application does not sanitize input before constructing SQL queries, which results in execution errors when malicious input is provided. The vulnerability exposes...

9.3CVSS6.1AI score0.00479EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/27 11:53 a.m.•12 views

EUVD-2026-67005

SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the idvideo parameter. The application does not sanitize input before constructing SQL queries, which results in execution errors when malicious input is provided. The vulnerability exposes...

9.3CVSS6AI score0.00479EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/27 11:53 a.m.•23 views

CVE-2026-81672

CVE-2026-81672 is a SQL injection vulnerability in TOOOLS' iSquad , affecting the /ws/apiprensa/getVideoSubcanal endpoint. The root cause is improper handling of the id_video parameter: the application does not sanitize input before constructing SQL queries, leading to execution errors with malic...

9.3CVSS6.1AI score0.00479EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/27 11:53 a.m.•48 views

CVE-2026-81672 Multiple Vulnerabilities in TOOOLS' iSquad

SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the idvideo parameter. The application does not sanitize input before constructing SQL queries, which results in execution errors when malicious input is provided. The vulnerability exposes...

9.3CVSS0.00479EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/27 12:00 a.m.•2 views

CVE-2026-81672: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the idvideo parameter. The application does not sanitize input before constructing SQL queries, which results in execution errors when malicious input is provided. The vulnerability exposes...

9.3CVSS6AI score0.00479EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/27 12:00 a.m.•3 views

CVE-2026-81673: Improper Neutralization of Special Elements used in an SQL Command

The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the idvideo and idambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of...

9.3CVSS6.1AI score0.00605EPSS
SaveExploits0References2
Rows per page
Query Builder