Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2026/02/20 1:22 a.m.•20 views

CVE-2026-2663

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

6.5CVSS5.4AI score0.00318EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/18 8:18 p.m.•19 views

CVE-2026-2663

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

6.5CVSS0.00318EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/18 7:32 p.m.•48 views

CVE-2026-2663 Alixhan xh-admin-backend Database Query query sql injection

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

6.5CVSS0.00318EPSS
SaveExploits0References3
CVE
CVE
•added 2026/02/18 7:32 p.m.•31 views

CVE-2026-2663

Summary: CVE-2026-2663 affects Alixhan xh-admin-backend v1.0–1.7.0 (unknown exact initial versions) due to vulnerable handling in the Database Query Handler for the endpoint /frontend-api/system-service/api/system/role/query, where argument manipulation enables SQL injection. This reportedly allo...

6.5CVSS5.4AI score0.00318EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/18 12:00 a.m.•6 views

CVE-2026-2663: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

6.5CVSS6.2AI score0.00318EPSS
SaveExploits0References1
Rows per page
Query Builder