7.6
Élevée
CVE-2025-32122 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix uListing ulisting allows Blind SQL Injection.This issue affects uListing: from n/a through <= 2.2.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| uListing 2.2 | premières → 2.2.0 | Pas de correctif indiqué |
Autres CVE de uListing
Les 11 CVE de uListing →
CVE-2026-62033
Subscriber Settings Change in uListing <= 2.2.0 versions
7.6
Élevée
CVE-2026-62031
Unauthenticated SQL Injection in uListing <= 2.2.0 versions
9.3
Critique
CVE-2026-27391
Subscriber Broken Access Control in uListing <= 2.2.0 versions
5.4
Moyenne
CVE-2026-27392
Contributor Broken Access Control in uListing <= 2.2.0 versions
4.3
Moyenne