Vulnerabilities

TI-2025-41090 CVE-2025-66944 · GHSA-v9pc-fp33-jwc2

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote…

HIGH 82

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00891 Published 2026-03-04 No fix listed CWE-89

TI-2023-12435 CVE-2023-27821 · GHSA-wvhh-mm56-49c7

Databasir v1.0.7 was discovered to contain a remote code execution (RCE) vulnerability via the mockDataScript parameter.

HIGH 82

Databasir v1.0.7 was discovered to contain a remote code execution (RCE) vulnerability via the mockDataScript parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01504 Published 2023-03-28 No fix listed CWE-917

TI-2022-13236 CVE-2022-31196

Server-Side Request Forgery (SSRF) vulnerability in Databasir

HIGH 66

Databasir is a database metadata management platform.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.01061 Published 2022-09-02 Fixed in 1.0.7 CWE-918

TI-2022-08672 CVE-2022-24861

Remote Code Execution in Databasir

HIGH 76

Databasir is a team-oriented relational database model document management platform.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.03049 Published 2022-04-20 Fixed in 1.0.2 CWE-20

Vulnerabilities

Filters

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote…

Databasir v1.0.7 was discovered to contain a remote code execution (RCE) vulnerability via the mockDataScript parameter.

Server-Side Request Forgery (SSRF) vulnerability in Databasir

Remote Code Execution in Databasir