CVE-2025-55472

SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerability arises due to unsafe handling of user-supplied input in the columns0data parameter, which is directly used in SQL queries without proper validation or parameterization...

CVE-2025-55472

SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerability arises due to unsafe handling of user-supplied input in the columns0data parameter, which is directly used in SQL queries without proper validation or parameterization...

CVE-2025-55472

SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerability arises due to unsafe handling of user-supplied input in the columns0data parameter, which is directly used in SQL queries without proper validation or parameterization...

PT-2025-35582

Name of the Vulnerable Software and Affected Versions: Tirreno version 0.9.5 Description: A SQL Injection issue exists in Tirreno version 0.9.5. The vulnerability is located in the /admin/loadUsers API endpoint, stemming from the unsafe handling of user-supplied input within the columns0data...

PT-2023-15887 · Unknown · Nflpick-Em.Com

Name of the Vulnerable Software and Affected Versions: nflpick-em.com versions up to 2.2.x Description: A problematic vulnerability was found in nflpick-em.com, affecting the Load Users function of the file html/includes/runtime/admin/JSON/LoadUsers.php. The manipulation of the sort argument lead...