Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/02/04 1:20 p.m.2 views

CVE-2026-1432

SQL injection vulnerability in the Buroweb platform version 2505.0.12, specifically in the 'tablon' component. This vulnerability is present in several parameters that do not correctly sanitize user input in the endpoint '/sta/CarpetaPublic/doEvent?APPCODE=STACODE=TABLON'. Exploiting this...

9.3CVSS5.8AI score0.00017EPSS
Exploits0References1
NVD
NVD
added 2026/02/03 12:16 p.m.3 views

CVE-2026-1432

SQL injection vulnerability in the Buroweb platform version 2505.0.12, specifically in the 'tablon' component. This vulnerability is present in several parameters that do not correctly sanitize user input in the endpoint '/sta/CarpetaPublic/doEvent?APPCODE=STA&PAGECODE=TABLON'. Exploiting this...

9.3CVSS0.00017EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/03 11:14 a.m.3 views

CVE-2026-1432

SQL injection vulnerability in the Buroweb platform version 2505.0.12, specifically in the 'tablon' component. This vulnerability is present in several parameters that do not correctly sanitize user input in the endpoint '/sta/CarpetaPublic/doEvent?APPCODE=STA&PAGECODE=TABLON'. Exploiting this...

9.3CVSS5.8AI score0.00017EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/03 11:14 a.m.3 views

CVE-2026-1432 SQL injection (SQLi) on the Buroweb platform

SQL injection vulnerability in the Buroweb platform version 2505.0.12, specifically in the 'tablon' component. This vulnerability is present in several parameters that do not correctly sanitize user input in the endpoint '/sta/CarpetaPublic/doEvent?APPCODE=STA&PAGECODE=TABLON'. Exploiting this...

9.3CVSS5.8AI score0.00017EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/03 11:14 a.m.22 views

CVE-2026-1432 SQL injection (SQLi) on the Buroweb platform

SQL injection vulnerability in the Buroweb platform version 2505.0.12, specifically in the 'tablon' component. This vulnerability is present in several parameters that do not correctly sanitize user input in the endpoint '/sta/CarpetaPublic/doEvent?APPCODE=STA&PAGECODE=TABLON'. Exploiting this...

9.3CVSS0.00017EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/03 12:0 a.m.2 views

Buroweb SQL注入漏洞

Buroweb is an e-commerce platform developed by the French company Buroweb. Version 2505.0.12 of Buroweb has a SQL injection vulnerability. This vulnerability stems from improper cleaning of user input in the tablon component, which could allow attackers to execute database queries and access...

9.3CVSS6AI score0.00017EPSS
Exploits0References1
Rows per page
Query Builder