Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 06:22:35 +0000 EUVD-2026-331328 https://cve.radiocsirt.org/vuln/euvd-2026-331328 EUVD-2026-331328 https://cve.radiocsirt.org/vuln/euvd-2026-331328 fkie_cve-2026-53690 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53690 <p>An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the &#34;userEmail&#34; parameter in the POST &#34;/admin/index.php&#34; login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared statements, which allows unauthenticated remote attackers to execute arbitrary SQL commands and extract sensitive database information.</p> <p>An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the &#34;userEmail&#34; parameter in the POST &#34;/admin/index.php&#34; login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared statements, which allows unauthenticated remote attackers to execute arbitrary SQL commands and extract sensitive database information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-53690 GHSA-722f-j64m-mq4x https://cve.radiocsirt.org/vuln/ghsa-722f-j64m-mq4x <p>An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the &#34;userEmail&#34; parameter in the POST &#34;/admin/index.php&#34; login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared statements, which allows unauthenticated remote attackers to execute arbitrary SQL commands and extract sensitive database information.</p> <p>An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the &#34;userEmail&#34; parameter in the POST &#34;/admin/index.php&#34; login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared statements, which allows unauthenticated remote attackers to execute arbitrary SQL commands and extract sensitive database information.</p> https://cve.radiocsirt.org/vuln/ghsa-722f-j64m-mq4x