EUVD-2025-14829

Malicious code in bioql PyPI...

CVE-2025-28057

owl-admin v3.2.2 to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/adminmenus/saveorder...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection through the /admin-api/system/adminmenus/saveorder endpoint. An attacker can manipulate the SQL queries and access or modify data in the database by injecting malicious SQL commands. Remediation Upgrade slowlyo/owl-admin t...

CVE-2025-28057

owl-admin v3.2.2 to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/adminmenus/saveorder...

CVE-2025-28057

owl-admin v3.2.2 to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/adminmenus/saveorder...

CVE-2025-28057

Summary of CVE-2025-28057 : The owl-admin project is affected for versions 3.2.2 through 4.10.2 by a SQL Injection in the /admin-api/system/admin_menus/save_order endpoint. This is documented with a high-severity CVSS 3.1 score (7.2) impacting confidentiality, integrity, and availability. The roo...

CVE-2025-28057

owl-admin v3.2.2 to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/adminmenus/saveorder...

Owl Admin 安全漏洞

Owl Admin is a fast and flexible backend framework from Owl Admin. A security vulnerability exists in Owl Admin v3.2.2 through v4.10.2, which stems from an SQL injection in /admin-api/system/adminmenus/saveorder...

PT-2025-20910 · Owl-Admin · Owladmin

Name of the Vulnerable Software and Affected Versions: owl-admin versions 3.2.2 through 4.10.2 Description: The issue is related to SQL Injection in the "/admin-api/system/admin menus/save order" API endpoint. Recommendations: For versions 3.2.2 through 4.10.2, consider disabling access to the...

CVE-2025-28057

owl-admin v3.2.2 to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/adminmenus/saveorder...

Owl Admin 跨站脚本漏洞

OwlAdmin Owl Admin is a fast and flexible backend framework from OwlAdmin, Inc. A cross-site scripting vulnerability exists in slowlyo OwlAdmin version 3.5.7 and earlier versions, which stems from the fact that incorrect manipulation of the parameter file can lead to cross-site scripting...