Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Priority HIGH 77

Library CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0055 Published 2026-03-26 No fix listed CWE-89
Priority HIGH 77

Online Store System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the email parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0034 Published 2026-03-26 No fix listed CWE-89
Priority HIGH 77

SAT CFDI 3.3 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id' parameter in the signIn endpoint.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0025 Published 2026-03-26 No fix listed CWE-89
Priority MEDIUM 64

School Management System CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows attackers to bypass authentication by injecting SQL code through the username parameter.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00507 Published 2026-03-26 No fix listed CWE-89
Priority HIGH 77

Wecodex Hotel CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows unauthenticated attackers to bypass authentication by injecting SQL code.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00529 Published 2026-03-26 No fix listed CWE-89
Priority MEDIUM 45

Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the username parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00477 Published 2026-03-26 No fix listed CWE-89
Priority HIGH 77

Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00529 Published 2026-03-26 No fix listed CWE-89