9.3
Critical
CVE-2026-84813 Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions
Description
Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GeoDirectory 2.8 | earliest → 2.8.174 | No fix stated |
Other CVEs of GeoDirectory
The 11 CVEs of GeoDirectory →
CVE-2026-81271
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions
8.8
High
CVE-2026-66604
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions
7.1
High
CVE-2026-68565
Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions
6.5
Medium
CVE-2026-57681
Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions
6.4
Medium