TI-2026-56331 CVE-2026-81677 · GHSA-89q2-6fq2-wxfg
Multiple Vulnerabilities in TOOOLS' iSquad
Priority MEDIUM 44
The ‘/ws/apiprensa/getVideo’ endpoint is vulnerable to SQL injection due to improper validation of the GET parameter `id_ambito`.
Vulnerabilities
6 records
TI-2026-56330 CVE-2026-81676 · GHSA-vwjv-vcjm-rxvp
Multiple Vulnerabilities in TOOOLS' iSquad
Priority MEDIUM 44
A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the `limit_videos` parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization.
TI-2026-56329 CVE-2026-81675 · GHSA-cc7j-wc52-pjhx
Multiple Vulnerabilities in TOOOLS' iSquad
Priority MEDIUM 48
The endpoint ‘/ws/apiprensa/getVideoUltimasSeccion’ contains an SQL injection vulnerability in the id_seccion parameter.
TI-2026-56328 CVE-2026-81674 · GHSA-5w9h-62pq-pj3g
Multiple Vulnerabilities in TOOOLS' iSquad
Priority MEDIUM 49
The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito parameter.
TI-2026-56327 CVE-2026-81673 · GHSA-jrxj-37q3-93g2
Multiple Vulnerabilities in TOOOLS' iSquad
Priority MEDIUM 49
The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the id_video and id_ambito parameters.
TI-2026-56326 CVE-2026-81672 · GHSA-67gh-45qv-f464
Multiple Vulnerabilities in TOOOLS' iSquad
Priority MEDIUM 49
SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the id_video parameter.