9 matches found
CVE-2026-51366
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51367: Authorization Bypass Through User-Controlled Key
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51366
A SQL Injection vulnerability exists in Bottinelli Informatica Vedo Suite v.1.2.5 . A remote attacker can exploit this flaw via the api_vedo/chat endpoint using the utente_chat parameter to achieve arbitrary code execution . The vulnerability is characterized by the improper neutralization of spe...
EUVD-2026-62481
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51367
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51366
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51366: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51367
Bottinelli Informatica Vedo Suite v.1.2.5 is affected by a vulnerability that allows a remote attacker to obtain sensitive information . The issue is reachable via the api_vedo/chat endpoint by manipulating the utente_chat parameter. While the provided documents characterize this as an authorizat...