CVE-2025-66944

Publication date

2026-03-04 00:00:00

Family

mitre

State

PUBLISHED

Description

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint