Lucene search
+L

3 matches found

NVD
NVD
•added 2026/03/31 10:16 a.m.•27 views

CVE-2026-4317

SQL inyection SQLi vulnerability in Umami Software web application through an improperly sanitized parameter, which could allow an authenticated attacker to execute arbitrary SQL commands in the database.Specifically, they could manipulate the value of the 'timezone' request parameter by includin...

9.3CVSS0.00396EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/31 9:53 a.m.•9 views

CVE-2026-4317 SQL inyection in Umami Software application

SQL inyection SQLi vulnerability in Umami Software web application through an improperly sanitized parameter, which could allow an authenticated attacker to execute arbitrary SQL commands in the database.Specifically, they could manipulate the value of the 'timezone' request parameter by includin...

9.3CVSS6.2AI score0.00396EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/31 9:53 a.m.•8 views

CVE-2026-4317

SQL inyection SQLi vulnerability in Umami Software web application through an improperly sanitized parameter, which could allow an authenticated attacker to execute arbitrary SQL commands in the database.Specifically, they could manipulate the value of the 'timezone' request parameter by includin...

9.3CVSS6.2AI score0.00396EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder