9.3
Critique
CVE-2026-39512 Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions
Description
Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GeoDirectory 2.8 | premières → 2.8.152 | Pas de correctif indiqué |
Autres CVE de GeoDirectory
Les 11 CVE de GeoDirectory →
CVE-2026-84813
Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions
9.3
Critique
CVE-2026-81271
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions
8.8
Élevée
CVE-2026-66604
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions
7.1
Élevée
CVE-2026-68565
Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions
6.5
Moyenne