https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T04:37:44.211735+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-7146 CVE-2023-7146 — gopeak MasterLab HTTP POST Request Feature.php sqlInjectDelete sql injection 2026-10-17T04:37:44.213530+00:00

Affected: gopeak MasterLab

A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjectDelete of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument phone leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-249149 was assigned to this vulnerability.