Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.8%	CVE-2026-108065WebAlliance eCommerce · SQL injection Critical9.8EPSS 0.8%2026-10-14CVE Database V5CVE-2026-108065 CVE-2026-108065 is a critical SQL Injection vulnerability in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce. It allows an unauthenticated remote attacker to manipulate the sUserID parameter to execute arbitrary SQL commands on the backend Microsoft SQL Server. This can lead to full compromise of the database, including reading, writing, and executing commands. EPSS 0.8%Vulnerability Channel Software #cwe-89	CVE Database V5	2026-10-14

Showing 1–1 of 1 result