CVE-2026-75336

Funiture 1.0.0 is susceptible to SQL Injection through its backend tool management interfaces, specifically /sys/tool/select.json and /sys/tool/update.json . An attacker able to reach these endpoints could manipulate SQL queries to read, modify, or delete data in the underlying database. No CVSS ...

PT-2026-82337

Name of the Vulnerable Software and Affected Versions Funiture version 1.0.0 Description SQL Injection occurs in the backend tool interfaces. This issue affects the endpoints '/sys/tool/select.json' and '/sys/tool/update.json'. Recommendations At the moment, there is no information about a newer...