8.5
Élevée
CVE-2026-94663 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ProfileGrid 6.0 | premières → 6.0.0.2 | Pas de correctif indiqué |
Autres CVE de ProfileGrid
Les 27 CVE de ProfileGrid →
CVE-2026-62061
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid…
5.3
Moyenne
CVE-2026-57697
Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid …
7.5
Élevée
CVE-2026-57759
Cross-Site Request Forgery (CSRF) vulnerability in Metagauss ProfileGrid…
8.8
Élevée
CVE-2026-25417
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss…
6.5
Moyenne