CVE-2026-39512 Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions

Description

Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions.

Affected products and versions

Product	Affected versions	Fixed in
GeoDirectory 2.8	earliest → 2.8.152	No fix stated

Other CVEs of GeoDirectory

The 11 CVEs of GeoDirectory →

CVE-2026-84813 Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions 9.3 Critical CVE-2026-81271 Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions 8.8 High CVE-2026-66604 Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions 7.1 High CVE-2026-68565 Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions 6.5 Medium