https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T14:18:15.853537+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-324619 EUVD-2026-324619 2026-10-20T14:18:15.855684+00:00 EUVD-2026-324619 https://cve.radiocsirt.org/vuln/fkie_cve-2019-25728 fkie_cve-2019-25728 2026-10-20T14:18:15.855716+00:00

Care2x 2.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by manipulating the ck_config cookie parameter. Attackers can inject malicious SQL through the ck_config cookie in multiple endpoints including login.php, indexframe.php, and various module files to extract sensitive database information without authentication.

 https://cve.radiocsirt.org/vuln/ghsa-vr4m-89wj-3qwx GHSA-vr4m-89wj-3qwx 2026-10-20T14:18:15.855747+00:00

Care2x 2.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by manipulating the ck_config cookie parameter. Attackers can inject malicious SQL through the ck_config cookie in multiple endpoints including login.php, indexframe.php, and various module files to extract sensitive database information without authentication.