https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 10:49:12 +0000 https://cve.radiocsirt.org/vuln/cve-2019-25662 <p><strong>Affected:</strong> Montala ResourceSpace</p> <p>ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the &#39;ref&#39; parameter. Attackers can send GET requests to the watched_searches.php endpoint with crafted SQL payloads to extract sensitive database information including usernames and credentials.</p> <p><strong>Affected:</strong> Montala ResourceSpace</p> <p>ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the &#39;ref&#39; parameter. Attackers can send GET requests to the watched_searches.php endpoint with crafted SQL payloads to extract sensitive database information including usernames and credentials.</p> https://cve.radiocsirt.org/vuln/cve-2019-25662