Threats tagged 'ghsa-8pqv-6v86-4wxr'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.9	CVE-2026-77881Control Web Panel (CWP) before webpanel_version 1.30 contains a blind SQL injection vulnerability in an Medium6.92026-11-02GCVE DatabaseCVE-2026-77881 Control Web Panel (CWP) versions before 1.30 contain a blind SQL injection vulnerability in an unauthenticated loopback API route. The vulnerability arises because the 'user' parameter is directly interpolated into a SQL query against the oauth_clients table, allowing attackers to perform time-based blind SQL injection and extract arbitrary database contents without authentication. Report on CVE-2026-77881 Vulnerability CWE-89 #ghsa-8pqv-6v86-4wxr	GCVE Database	2026-11-02

Page 1 of 1