Threats tagged 'ghsa-vf9j-hvfg-gxxf'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.4%	CVE-2026-38468GazellePW (GazellePosterWall) commit · SQL Injection Vulnerability Medium4.3EPSS 0.4%2026-08-26GCVE DatabaseCVE-2026-38468 A SQL injection vulnerability exists in the country-code lookup endpoint of GazellePW (GazellePosterWall) at commit 86c4bedf727691b5a97af42a4864869d18446449. This flaw allows remote authenticated users with users_view_ips privileges to execute arbitrary SQL commands via the ip parameter in a crafted request to tools.php?action=get_cc. The vulnerability has a CVSS score of 4.3, indicating medium severity. EPSS 0.4%Report on CVE-2026-38468 Vulnerability CWE-89 #ghsa-vf9j-hvfg-gxxf	GCVE Database	2026-08-26

Page 1 of 1