Threats tagged 'ghsa-v266-hpvv-qc3w'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.1	CVE-2026-112172CGM XDent and XMedical expose PHP synchronization endpoints that allow unauthenticated attackers to manipulate session High8.12026-11-09GCVE DatabaseCVE-2026-112172 CGM XDent and XMedical contain PHP synchronization endpoints that are vulnerable to unauthenticated manipulation of session variables and arbitrary SQL query execution against backend MySQL databases. This vulnerability allows attackers to perform unauthorized actions without any authentication. Report on CVE-2026-112172 Vulnerability CWE-89 #ghsa-v266-hpvv-qc3w	GCVE Database	2026-11-09

Page 1 of 1