Vulnerabilities

TI-2025-28765 CVE-2025-45346 · GHSA-hq25-vp56-qr86

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to…

LOW 39

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00881 Published 2025-07-29 Fixed in 9.7.1 CWE-89

TI-2017-11280 CVE-2017-15367 · GHSA-fv4m-5j2c-787r

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that…

MEDIUM 62

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.23067 Published 2018-03-07 Fixed in 8.0.0-rc2 CWE-89

TI-2014-06818 CVE-2014-8295 · GHSA-24xp-r7x6-gh85

SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers…

LOW 37

SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL commands via the jobid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02348 Published 2014-10-15 No fix listed CWE-89

Vulnerabilities

Filters

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to…

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that…

SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers…