https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T15:09:46.972714+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-328457 EUVD-2026-328457 2026-10-15T15:09:47.059856+00:00 EUVD-2026-328457 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40455 fkie_cve-2026-40455 2026-10-15T15:09:47.059892+00:00

An SQL Injection vulnerability exists in LMS (LAN Management System) before commit 4cb30a7 within the "tarifflist.php" module due to insufficient sanitization of the POST "tg[]" parameter. The application directly concatenates user-supplied array values into an SQL query using "implode()", allowing authenticated attackers to perform Error-Based SQL injection and extract sensitive database information.

 https://cve.radiocsirt.org/vuln/ghsa-qrw9-xj5g-qxw8 GHSA-qrw9-xj5g-qxw8 2026-10-15T15:09:47.059928+00:00

An SQL Injection vulnerability exists in LMS (LAN Management System) before commit 4cb30a7 within the "tarifflist.php" module due to insufficient sanitization of the POST "tg[]" parameter. The application directly concatenates user-supplied array values into an SQL query using "implode()", allowing authenticated attackers to perform Error-Based SQL injection and extract sensitive database information.