https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:06:23.363116+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-107638 EUVD-2026-107638 2026-10-02T15:06:23.443174+00:00 EUVD-2026-107638 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4662 fkie_cve-2013-4662 2026-10-02T15:06:23.443211+00:00

The Quick Search API in CiviCRM 4.2.0 through 4.2.9 and 4.3.0 through 4.3.3 allows remote authenticated users to bypass the validation layer and conduct SQL injection attacks via a direct request to the "second layer" of the API, related to contact.getquick.

 https://cve.radiocsirt.org/vuln/ghsa-4465-r2hg-v4rj GHSA-4465-r2hg-v4rj — CiviCRM SQL injection vulnerability via Quick Search API 2026-10-02T15:06:23.443300+00:00

Affected: Packagist: civicrm/civicrm-core

The Quick Search API in CiviCRM 4.2.0 through 4.2.9 and 4.3.0 through 4.3.3 allows remote authenticated users to bypass the validation layer and conduct SQL injection attacks via a direct request to the "second layer" of the API, related to contact.getquick.

 https://cve.radiocsirt.org/vuln/gsd-2013-4662 gsd-2013-4662 2026-10-02T15:06:23.443328+00:00 gsd-2013-4662