Threats tagged 'ghsa-mqq6-92qv-xfm9'

Raytha CMS version 1.5.2 is vulnerable to an SQL Injection flaw in its OData filter parsing pipeline. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary SQL commands on the underlying PostgreSQL database, potentially leading to full database compromise including extraction of credentials. The vulnerability has been confirmed only in version 1.5.2, but other versions may also be affected. No patch or remediation information is currently available, and no known exploits have been reported in the wild.