https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T23:06:40.002666+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-28516 CVE-2026-28516 — openDCIM <= 23.04 SQL Injection in Config::UpdateParameter 2026-10-15T23:06:40.003751+00:00

Affected: openDCIM

openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter. The install.php and container-install.php handlers pass user-supplied input directly into SQL statements using string interpolation without prepared statements or proper input sanitation. An authenticated user can execute arbitrary SQL statements against the underlying database.