287401 matches found
EUVD-2026-104867
The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...
CVE-2026-112238 SQL Injection in extension "File manager" (ameos_filemanager)
The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...
CVE-2026-112238
The ameos_filemanager extension contains an SQL Injection vulnerability (CWE-89) within its file search functionality. The application fails to escape quote characters when building database conditions, only escaping wildcard characters for the LIKE operator. Consequently, a crafted search term c...
CVE-2026-112238
The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...
CVE-2026-112238 SQL Injection in extension "File manager" (ameos_filemanager)
The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...
TYPO3-EXT-SA-2026-029: SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-029...
TYPO3-EXT-SA-2026-034: SQL Injection in extension "File manager" (ameos_filemanager)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-034...
CVE-2026-113407
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents...
CVE-2026-113406
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents...
CVE-2026-113405
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents...
CVE-2026-113407 YS-infoware｜BA-Workflow - SQL Injection
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents...
CVE-2026-113407 YS-infoware｜BA-Workflow - SQL Injection
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents...
EUVD-2026-104826
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents...
CVE-2026-113407
BA-Workflow , developed by YS-infoware , contains a SQL Injection vulnerability (CWE-89). Authenticated remote attackers can exploit this flaw to inject arbitrary SQL statements, potentially allowing them to read, modify, and delete database contents. No specific patch version or remediation step...
CVE-2026-113406 YS-infoware｜BA-Workflow - SQL Injection
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents...
EUVD-2026-104825
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents...
CVE-2026-113406 YS-infoware｜BA-Workflow - SQL Injection
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents...
CVE-2026-113406
The BA-Workflow software developed by YS-infoware is vulnerable to a SQL Injection (CWE-89). This flaw allows authenticated remote attackers to inject arbitrary SQL statements, potentially resulting in the unauthorized reading, modification, or deletion of database contents. Specific information ...
CVE-2026-113405 YS-infoware｜BA-Workflow - SQL Injection
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents...