Vendors / Databasir Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 1
Exploited now Databasir records in CISA KEV No Databasir vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00891 · Published 2026-03-04 · No fix listed CWE-89
Priority HIGH 82
Databasir v1.0.7 was discovered to contain a remote code execution (RCE) vulnerability via the mockDataScript parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01504 · Published 2023-03-28 · No fix listed CWE-917
Priority HIGH 76
Databasir is a team-oriented relational database model document management platform.
CVSS 3.1 CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.03049 · Published 2022-04-20 · Fixed in 1.0.2 CWE-20
Priority HIGH 66
Databasir is a database metadata management platform.
CVSS 3.1 HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.01061 · Published 2022-09-02 · Fixed in 1.0.7 CWE-918
Open these records in search → All records by CVSS severity
3 1 0 0 0
