3 matches found
CVE-2026-48842
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuserquery plugin via a pregreplace backslash escape bypass...
8.1CVSS5.8AI score0.00764EPSS
SaveExploits0References6Affected Software1
Sql injection
TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...
7.5CVSS9.5AI score0.01386EPSS
SaveExploits0References3Affected Software2
CVE-2020-3934 TAIWAN SECOM CO., LTD. - Pre-auth SQL Injection
TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...
9.8CVSS9.7AI score0.01386EPSS
SaveExploits0References3
20