287131 matches found
CVE-2026-116818 OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocket
OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers to inject SQL through the projectId parameter of the /live/visitors/:projectId WebSocket, which lacks session and project-access checks. Attackers can use UNION or boolean count...
CVE-2026-116818
OpenPanel versions prior to 3.0.0 are vulnerable to an unauthenticated ClickHouse SQL injection vulnerability. The root cause is a lack of session and project-access checks on the /live/visitors/:projectId WebSocket. Remote attackers can inject SQL via the projectId parameter, using techniques li...
CVE-2026-116818 OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocket
OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers to inject SQL through the projectId parameter of the /live/visitors/:projectId WebSocket, which lacks session and project-access checks. Attackers can use UNION or boolean count...
CVE-2026-116812
OpenPanel versions before 3.0.0 are vulnerable to a SQL injection flaw within the profileColumnAccess function in cohort.service.ts. This issue occurs because the application fails to escape profile filter column names . Project-read members can exploit this by submitting a cohort.preview filter ...
CVE-2026-116813 OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.ts
OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion that allows project-read members and share-link holders to inject ClickHouse SQL through unescaped event names and dates. Attackers can break out of string literals in series names or startDate/endDa...
CVE-2026-116812 OpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile filter
OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.service.ts that allows project-read members to inject SQL by supplying unescaped profile filter column names. Attackers can submit a cohort.preview filter whose name contains a subquery spliced into...
CVE-2026-116813 OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.ts
OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion that allows project-read members and share-link holders to inject ClickHouse SQL through unescaped event names and dates. Attackers can break out of string literals in series names or startDate/endDa...
CVE-2026-116813 OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.ts
OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion that allows project-read members and share-link holders to inject ClickHouse SQL through unescaped event names and dates. Attackers can break out of string literals in series names or startDate/endDa...
CVE-2026-116812 OpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile filter
OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.service.ts that allows project-read members to inject SQL by supplying unescaped profile filter column names. Attackers can submit a cohort.preview filter whose name contains a subquery spliced into...
CVE-2026-116813
OpenPanel versions before 3.0.0 are vulnerable to a ClickHouse SQL Injection in the ConversionService.getConversion component. The root cause is the handling of unescaped event names and dates, which allows attackers to break out of string literals. Specifically, by using payloads like OR 1=1 in ...
CVE-2026-116808 OpenPanel before 3.0.0 ClickHouse SQL Injection via profile.values
OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to read cross-tenant data by supplying a crafted property parameter to profile.values. Attackers can inject a SELECT expression with their own FROM/WHERE clauses and comment out the projectid scope to...
CVE-2026-116808
OpenPanel versions prior to 3.0.0 are vulnerable to a ClickHouse SQL Injection flaw via the profile.values parameter. An authenticated user can provide a crafted property parameter to inject a SELECT expression with custom FROM and WHERE clauses. By commenting out the project_id scope, an attacke...
CVE-2026-116808 OpenPanel before 3.0.0 ClickHouse SQL Injection via profile.values
OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to read cross-tenant data by supplying a crafted property parameter to profile.values. Attackers can inject a SELECT expression with their own FROM/WHERE clauses and comment out the projectid scope to...
CVE-2026-116807
OpenPanel versions prior to 3.0.0 are vulnerable to an SQL injection vulnerability within the ClickHouse database. The flaw exists in the event.events tRPC Query , where unescaped profile filter names are injected into a JOIN subquery . Authenticated users can exploit this by supplying a crafted ...
CVE-2026-116807 OpenPanel before 3.0.0 ClickHouse SQL Injection via event.events tRPC Query
OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to bypass tenant scoping by injecting unescaped profile filter names into a JOIN subquery. Attackers can supply a crafted filter name with a trailing comment to bypass the projectid WHERE clause and rea...
CVE-2026-116807 OpenPanel before 3.0.0 ClickHouse SQL Injection via event.events tRPC Query
OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to bypass tenant scoping by injecting unescaped profile filter names into a JOIN subquery. Attackers can supply a crafted filter name with a trailing comment to bypass the projectid WHERE clause and rea...
CVE-2026-116515
A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...
CVE-2026-116515
The itsourcecode Online Book Store 1.0 application is vulnerable to SQL injection within the /book.php file. The vulnerability is triggered by the manipulation of the bookisbn argument. This flaw can be exploited remotely, and an exploit has been disclosed publicly. No specific remediation or ver...
CVE-2026-116515 itsourcecode Online Book Store book.php sql injection
A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...
CVE-2026-116515 itsourcecode Online Book Store book.php sql injection
A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...