Threats tagged 'ghsa-47mv-g24j-2rhh'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-63146Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled Critical9.32026-10-13GCVE DatabaseCVE-2026-63146 Omnispace Agora Project versions before 26.10.0 contain a critical code injection vulnerability. This flaw arises from unescaped, attacker-controlled input being written into the config.inc.php file during installation, combined with an SQL injection vulnerability that allows stacked queries. Exploitation enables unauthenticated remote code execution on the underlying system. Report on CVE-2026-63146 Vulnerability CWE-94 #ghsa-47mv-g24j-2rhh	GCVE Database	2026-10-13

Page 1 of 1