Skip to content
Sign in
5.1 Medium

CVE-2026-1517 A vulnerability was identified in iomad up to 5.0

Description

A vulnerability was identified in iomad up to 5.0. Affected is an unknown function of the component Company Admin Block. Such manipulation leads to sql injection. The attack can be executed remotely. It is best practice to apply a patch to resolve this issue.

Affected products and versions

Product Affected versions Fixed in
iomad 5.0 No fix stated
iomad 4.5 No fix stated
iomad 4.4 No fix stated
iomad 4.3 No fix stated
iomad 4.2 No fix stated
iomad 4.1 No fix stated
iomad 4.0 No fix stated
iomad 3.11 No fix stated
iomad 3.10 No fix stated
Show the 9 other branches
Product Affected versions Fixed in
iomad 3.9 No fix stated
iomad 3.8 No fix stated
iomad 3.7 No fix stated
iomad 3.6 No fix stated
iomad 3.5 No fix stated
iomad 3.4 No fix stated
iomad 3.3 No fix stated
iomad 3.2 No fix stated
iomad 3.1 No fix stated

Other CVEs of iomad

The 3 CVEs of iomad →
CVE-2026-124834 iomad Password Field company_user.php store_temporary_password information disclosure 6.3 Medium CVE-2026-113702 iomad PDF Certificate lib.php local_iomad_pluginfile authorization 5.3 Medium
Track this CVE