CVE Vulnerability Advisory Database

[Affected Scope] On-premise deployments of VeloCloud Orchestrator (VCO).

[Impact] Authenticated users can escalate to 'superuser operator' privileges, leading to full system compromise and data breach.

[Mitigation] Apply official security patches immediately and restrict network access to the management interface.

[Affected Scope] All Cisco Secure Email Gateway appliances running vulnerable versions of Cisco AsyncOS Software.

[Impact] An unauthenticated remote attacker can execute arbitrary commands with root privileges by sending a crafted email, leading to full system compromise.

[Mitigation] Immediately apply the official security patches provided by Cisco and monitor for signs of exploitation.

[Affected Scope] Unpatched active instances of Metabase Open Source and Enterprise editions

[Impact] Remote, unauthenticated attackers can inject arbitrary SQL queries, manipulate the database, and gain full administrator access to the Metabase instance

[Mitigation] Apply the official vendor security patches immediately, or restrict access to the vulnerable endpoint using a WAF or reverse proxy

[Affected Scope] WordPress versions 6.9.x before 6.9.5, and 7.0.x before 7.0.2

[Impact] Unauthenticated attackers can exploit a REST API batch endpoint route confusion vulnerability, chaining it with the WP_Query SQL Injection (CVE-2026-60137) to compromise the database and achieve Remote Code Execution (RCE)

[Mitigation] Immediately upgrade WordPress core to patched versions (6.9.5, 7.0.2, or later), or temporarily disable the REST API batch endpoint and apply WAF rules

[Affected Scope] Sangoma Switchvox SMB Edition 8.3 (104997) and prior versions

[Impact] An unauthenticated remote attacker can execute arbitrary SQL statements against the backend PostgreSQL database, leading to full database compromise and remote code execution (RCE)

[Mitigation] Immediately upgrade to Switchvox version 8.4.0.2 or later, and restrict external access to the /pa endpoint

[Affected Scope] Drupal core versions 8.9.0 to < 10.4.10, 10.5.0 to < 10.5.10, 10.6.0 to < 10.6.9, 11.0.0 to < 11.1.10, 11.2.0 to < 11.2.12, and 11.3.0 to < 11.3.10

[Impact] Unauthenticated remote attackers can inject malicious SQL queries to extract sensitive database information, hijack administrator sessions, or potentially achieve Remote Code Execution (RCE).

[Mitigation] Immediately upgrade Drupal core to the respective patched versions (10.4.10, 10.5.10, 10.6.9, 11.1.10, 11.2.12, 11.3.10, or later).

[Affected Scope] LiteLLM proxy server environments running versions from 1.81.16 to before 1.83.7

[Impact] Unauthenticated attackers can read or modify the proxy's database, leading to unauthorized access to the proxy and managed API credentials

[Mitigation] Immediately upgrade LiteLLM to version 1.83.7 or later, and apply WAF rules to block malicious Authorization headers in the interim

[Affected Scope] Fortinet FortiClientEMS version 7.4.4

[Impact] An unauthenticated remote attacker can execute unauthorized code or commands with system privileges by sending crafted HTTP requests.

[Mitigation] Immediately apply the official vendor patches and restrict external access to the EMS management ports.

[Affected Scope] EasyCMS versions up to and including 1.6, specifically affecting the '_order' parameter in '/UserAction.class.php'.

[Impact] Unauthenticated remote attackers can manipulate the '_order' parameter to execute arbitrary SQL commands, leading to complete database compromise, sensitive data exfiltration, or potential remote code execution.

[Mitigation] Since the vendor has not responded with an official patch, immediately deploy Web Application Firewall (WAF) rules and manually implement strict whitelist validation on the affected PHP source code.

[Affected Scope] FeMiner wms up to commit 9cad1f1b179a98b9547fd003c23b07c7594775fa

[Impact] Unauthenticated remote attackers can manipulate the Username parameter to execute arbitrary SQL commands and compromise the database

[Mitigation] Implement parameterized queries in the source code and deploy Web Application Firewall (WAF) rules to block malicious payloads

[Affected Scope] Administrator panel component (/Administrator/PHP/AdminViewSongs.php) in code-projects Online Music Site 1.0

[Impact] Unauthenticated remote attackers can manipulate the ID parameter to execute arbitrary SQL commands, leading to complete database compromise

[Mitigation] Implement parameterized queries (Prepared Statements) immediately and restrict external access to the administrator directory

[Affected Scope] code-projects Online Music Site 1.0, specifically the /FrontEnd/Albums.php endpoint

[Impact] Unauthenticated remote attackers can manipulate the ID parameter to extract sensitive database information or compromise the underlying system

[Mitigation] Implement parameterized queries (Prepared Statements) in the source code and deploy Web Application Firewall (WAF) rules to block malicious SQL patterns

[Affected Scope] code-projects Online Music Site 1.0, specifically the /login.php endpoint

[Impact] Unauthenticated remote attackers can bypass authentication, extract sensitive database records, or potentially execute arbitrary system commands via SQL injection

[Mitigation] Implement parameterized queries (Prepared Statements) in the source code and deploy Web Application Firewall (WAF) rules to block malicious payloads

[Affected Scope] Campcodes Supplier Management System version 1.0, specifically the /retailer/edit_profile.php endpoint.

[Impact] Unauthenticated remote attackers can manipulate the txtRetailerAddress parameter to compromise the database, extract sensitive data, or potentially achieve remote code execution.

[Mitigation] Implement parameterized queries (Prepared Statements), sanitize user inputs, and deploy Web Application Firewall (WAF) rules to block malicious SQL payloads.

[Affected Scope] code-projects Online Product Reservation System 1.0, specifically the /handgunner-administrator/register_code.php component

[Impact] Unauthenticated remote attackers can manipulate user registration parameters to execute arbitrary SQL commands, leading to full database compromise and potential remote code execution

[Mitigation] Implement parameterized queries (Prepared Statements) for all user inputs and restrict access to the registration endpoint using WAF or web server configurations

[Affected Scope] The /pages.php endpoint of code-projects Content Management System (CMS) version 1.0.

[Impact] Unauthenticated remote attackers can manipulate the ID parameter to extract sensitive database information or potentially execute remote code depending on database privileges.

[Mitigation] Implement input validation and parameterized queries (Prepared Statements), and deploy Web Application Firewall (WAF) rules to block malicious SQL payloads.

[Affected Scope] code-projects Content Management System 1.0

[Impact] Unauthenticated remote attackers can manipulate the 'del' parameter to compromise the database, extract sensitive data, or potentially execute remote code

[Mitigation] Restrict external access to the vulnerable admin script and implement parameterized queries (Prepared Statements) in the source code

[Affected Scope] code-projects Content Management System (CMS) version 1.0.

[Impact] Unauthenticated remote attackers can manipulate the 'Value' parameter in search.php to execute arbitrary SQL commands, leading to sensitive data exposure, administrative privilege escalation, or system compromise.

[Mitigation] Implement parameterized queries (Prepared Statements) in the source code and deploy Web Application Firewall (WAF) rules to block malicious SQL injection payloads.

[Affected Scope] itsourcecode School Management System 1.0, specifically the /student/index.php endpoint.

[Impact] Unauthenticated remote attackers can manipulate the ID parameter to execute arbitrary SQL commands, leading to sensitive data exposure or potential Remote Code Execution (RCE) depending on database privileges.

[Mitigation] Implement parameterized queries (Prepared Statements) in the source code and deploy Web Application Firewall (WAF) rules to block malicious SQL payloads.

[Affected Scope] FreePBX endpoint module versions 15, 16, and 17

[Impact] Unauthenticated remote attackers can bypass authentication, manipulate the database, and execute arbitrary code with administrator privileges

[Mitigation] Immediately upgrade the FreePBX endpoint module to patched versions (15.0.66, 16.0.89, or 17.0.3) and restrict administrator access