Threats tagged 'ghsa-vcvg-6jh6-f58f'

1 threat

Threats tagged 'ghsa-vcvg-6jh6-f58f'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.3%	CVE-2026-111669Zr.Admin.NET · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in izhaorui… High7.1EPSS 0.3%2026-10-16CVE Database V5CVE-2026-111669 Zr.Admin.NET versions up to 3.8.2 contain an SQL injection vulnerability in the ToPage paging helper that allows authenticated users with system:user:list permission to manipulate the ORDER BY clause via the PagerInfo.Sort query parameter. This flaw enables injection of subqueries or CASE expressions through the GET /system/user/list endpoint, potentially exposing database contents including stored credentials. EPSS 0.3%Vulnerability izhaorui #ghsa-vcvg-6jh6-f58f	CVE Database V5	2026-10-16

Showing 1–1 of 1 result