SD.NET RIM versions before 4.7.3c contain a SQL injection vulnerability that allows attackers to inject malicious SQL statements through POST parameters 'idtyp' and 'idgremium'.
CVSS 4.0HIGH 8.8·Network·No auth·No interaction·EPSS 0.00174·Published 2026-02-18·Fixed in 4.7.3cCWE-352