4 matches found
CVE-2026-81673
The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the idvideo and idambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of...
CVE-2026-81673
CVE-2026-81673 affects the TOOOLS iSquad application, where the /ws/apitribuna/setVisita endpoint is vulnerable to SQL injection through the id_video and id_ambito parameters. The root cause is the absence of input validation or sanitization before these values are embedded in SQL queries. A remo...
CVE-2026-81673 Multiple Vulnerabilities in TOOOLS' iSquad
The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the idvideo and idambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of...
EUVD-2026-67008
The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the idvideo and idambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of...