Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 10:18:26 +0000 CVE-2019-25581 — i-doit CMDB 1.12 SQL Injection via objGroupID Parameter https://cve.radiocsirt.org/vuln/cve-2019-25581 <p><strong>Affected:</strong> I-Doit doit CMDB</p> <p>i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the objGroupID parameter. Attackers can send GET requests with crafted SQL payloads in the objGroupID parameter to extract sensitive database information including usernames, database names, and version details.</p> <p><strong>Affected:</strong> I-Doit doit CMDB</p> <p>i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the objGroupID parameter. Attackers can send GET requests with crafted SQL payloads in the objGroupID parameter to extract sensitive database information including usernames, database names, and version details.</p> https://cve.radiocsirt.org/vuln/cve-2019-25581