CVE-2026-78864

A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journey/journey.controller.t of the component Journey Entry Update. This manipulation causes sql injection. It is possible to initiate the atta...

EUVD-2026-65458

A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journey/journey.controller.t of the component Journey Entry Update. This manipulation causes sql injection. It is possible to initiate the atta...

CVE-2026-78864

A SQL injection vulnerability exists in liketrek TREK versions up to 3.0.22 , located in the journeyService.updateEntry function within the file server/src/nest/journey/journey.controller.t (Journey Entry Update component). The flaw can be exploited remotely by an authenticated user with low priv...