https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 09:03:56 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-252515 EUVD-2026-252515 https://cve.radiocsirt.org/vuln/euvd-2026-252515 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8311 <p>dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint. This endpoint uses the sites query parameter, which accepts a comma-separated list of site identifiers or keys.</p> <p>The vulnerability was triggered via the sites parameter, which was directly concatenated into a SQL query without proper sanitization.</p> <p>Exploitation allowed an authenticated attacker with low privileges to extract data from database, perform privilege escalation, or trigger denial-of-service conditions.</p> <p>The vulnerability was verified using tools such as SQLMap and confirmed to allow full database exfiltration and potential denial-of-service conditions via crafted payloads.</p> <p>The vulnerability is fixed in the following versions of dotCMS stack: 25.08.14 / 25.07.10-1v2 LTS / 24.12.27v10 LTS / 24.04.24v21 LTS</p> <p>dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint. This endpoint uses the sites query parameter, which accepts a comma-separated list of site identifiers or keys.</p> <p>The vulnerability was triggered via the sites parameter, which was directly concatenated into a SQL query without proper sanitization.</p> <p>Exploitation allowed an authenticated attacker with low privileges to extract data from database, perform privilege escalation, or trigger denial-of-service conditions.</p> <p>The vulnerability was verified using tools such as SQLMap and confirmed to allow full database exfiltration and potential denial-of-service conditions via crafted payloads.</p> <p>The vulnerability is fixed in the following versions of dotCMS stack: 25.08.14 / 25.07.10-1v2 LTS / 24.12.27v10 LTS / 24.04.24v21 LTS</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-8311 https://cve.radiocsirt.org/vuln/ghsa-9qw9-jx9r-5rcc <p>dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint. This endpoint uses the sites query parameter, which accepts a comma-separated list of site identifiers or keys.</p> <p>The vulnerability was triggered via the sites parameter, which was directly concatenated into a SQL query without proper sanitization.</p> <p>Exploitation allowed an authenticated attacker with low privileges to extract data from database, perform privilege escalation, or trigger denial-of-service conditions.</p> <p>The vulnerability was verified using tools such as SQLMap and confirmed to allow full database exfiltration and potential denial-of-service conditions via crafted payloads.</p> <p>The vulnerability is fixed in the following versions of dotCMS stack: 25.08.14 / 25.07.10-1v2 LTS / 24.12.27v10 LTS / 24.04.24v21 LTS</p> <p>dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint. This endpoint uses the sites query parameter, which accepts a comma-separated list of site identifiers or keys.</p> <p>The vulnerability was triggered via the sites parameter, which was directly concatenated into a SQL query without proper sanitization.</p> <p>Exploitation allowed an authenticated attacker with low privileges to extract data from database, perform privilege escalation, or trigger denial-of-service conditions.</p> <p>The vulnerability was verified using tools such as SQLMap and confirmed to allow full database exfiltration and potential denial-of-service conditions via crafted payloads.</p> <p>The vulnerability is fixed in the following versions of dotCMS stack: 25.08.14 / 25.07.10-1v2 LTS / 24.12.27v10 LTS / 24.04.24v21 LTS</p> https://cve.radiocsirt.org/vuln/ghsa-9qw9-jx9r-5rcc