Beveiligingsadvies

CVE-2026-38581

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-11 00:00:00

Laatst bijgewerkt 2026-06-11 14:40:29

Toegewezen door mitre

CVSS-score 9.8

Status PUBLISHED

Beschrijving

SQL Injection vulnerability in damasac thaipalliative_lte through version 3.0 allows remote attackers to execute arbitrary SQL commands via the idFormMain parameter to /substudy/ezform.php (line 14) and the id parameter (line 49). The parameters are concatenated directly into SQL queries without sanitization or parameterized statements.

← Alle CVE's bekijken Bekijk op cve.org ↗