Lucene search
+L

4 matches found

NVD
NVD
•added 2026/08/25 10:17 p.m.•11 views

CVE-2026-38467

A SQL injection vulnerability in the tags manager in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users with usersmod privileges to execute arbitrary SQL commands via the tagid or type parameter in a crafted POST request to...

5.4CVSS0.00312EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/25 12:00 a.m.•7 views

CVE-2026-38467

A SQL injection vulnerability in the tags manager in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users with usersmod privileges to execute arbitrary SQL commands via the tagid or type parameter in a crafted POST request to...

6.6AI score0.00312EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•1 views

CVE-2026-38467: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the tags manager in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users with usersmod privileges to execute arbitrary SQL commands via the tagid or type parameter in a crafted POST request to...

5.4CVSS6.4AI score0.00312EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/25 12:00 a.m.•21 views

CVE-2026-38467

A SQL injection vulnerability exists in the tags manager of GazellePW (GazellePosterWall) , specifically in commit 86c4bedf727691b5a97af42a4864869d18446449 . This flaw allows remote authenticated users with users_mod privileges to execute arbitrary SQL commands by sending a crafted POST request t...

5.4CVSS6.6AI score0.00312EPSS
SaveExploits0References2
Rows per page
Query Builder