https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 20:31:20 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-319683 EUVD-2026-319683 https://cve.radiocsirt.org/vuln/euvd-2026-319683 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9059 <p>NextGEN Gallery version prior to 4.2.1 are vulnerable to authenticated SQL injection via the &#39;orderby&#39; parameter on the REST API endpoints &#39;/imagely/v1/galleries&#39; and &#39;/imagely/v1/albums&#39;.</p> <p>The root cause is an insufficient sanitization function (&#39;_clean_column()&#39;) in the data mapper layer that uses a character blacklist instead of a whitelist approach. This allows an authenticated attacker with the &#39;NextGEN Gallery overview&#39; capability (assigned to the Administrator role by default) to inject arbitrary SQL into the &#39;ORDER BY&#39; clause.</p> <p>NextGEN Gallery version prior to 4.2.1 are vulnerable to authenticated SQL injection via the &#39;orderby&#39; parameter on the REST API endpoints &#39;/imagely/v1/galleries&#39; and &#39;/imagely/v1/albums&#39;.</p> <p>The root cause is an insufficient sanitization function (&#39;_clean_column()&#39;) in the data mapper layer that uses a character blacklist instead of a whitelist approach. This allows an authenticated attacker with the &#39;NextGEN Gallery overview&#39; capability (assigned to the Administrator role by default) to inject arbitrary SQL into the &#39;ORDER BY&#39; clause.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-9059 https://cve.radiocsirt.org/vuln/ghsa-q977-85xc-w698 <p>NextGEN Gallery version prior to 4.2.1 are vulnerable to authenticated SQL injection via the &#39;orderby&#39; parameter on the REST API endpoints &#39;/imagely/v1/galleries&#39; and &#39;/imagely/v1/albums&#39;.</p> <p>The root cause is an insufficient sanitization function (&#39;_clean_column()&#39;) in the data mapper layer that uses a character blacklist instead of a whitelist approach. This allows an authenticated attacker with the &#39;NextGEN Gallery overview&#39; capability (assigned to the Administrator role by default) to inject arbitrary SQL into the &#39;ORDER BY&#39; clause.</p> <p>NextGEN Gallery version prior to 4.2.1 are vulnerable to authenticated SQL injection via the &#39;orderby&#39; parameter on the REST API endpoints &#39;/imagely/v1/galleries&#39; and &#39;/imagely/v1/albums&#39;.</p> <p>The root cause is an insufficient sanitization function (&#39;_clean_column()&#39;) in the data mapper layer that uses a character blacklist instead of a whitelist approach. This allows an authenticated attacker with the &#39;NextGEN Gallery overview&#39; capability (assigned to the Administrator role by default) to inject arbitrary SQL into the &#39;ORDER BY&#39; clause.</p> https://cve.radiocsirt.org/vuln/ghsa-q977-85xc-w698