Threats tagged 'ghsa-w6x9-86mp-c7cf'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2026-75330super-diamond-server · SQL Injection Critical9.8EPSS 0.5%2026-08-26CVE Database V5CVE-2026-75330 A SQL injection vulnerability exists in the front-end interface /superdiamond/preview/{projectCode}/{module}/{type} of super-diamond-server versions up to and including 1.3.3. The vulnerability arises because the module parameter is concatenated directly into an SQL IN clause without proper parameterization or binding, allowing potential injection of malicious SQL code. This vulnerability has a critical severity with a CVSS score of 9.8. EPSS 0.5%Vulnerability CWE-89 #ghsa-w6x9-86mp-c7cf	CVE Database V5	2026-08-26

Page 1 of 1