SUSE CVE-2025-51667

An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the /sys-api/role/update interface. An attacker can access sensitive data or disrupt normal system operations by sending specially crafted requests. Remediation Upgrade...

PT-2025-34906

Name of the Vulnerable Software and Affected Versions: simple-admin-core versions 1.2.0 through 1.6.7 Description: An issue exists in the /sys-api/role/update interface of the simple-admin-core system. This interface has a SQL injection vulnerability that may lead to partial data leakage or...