EUVD-2026-70371

ID: EUVD-2026-70371

Severity: high

CVSS v4: 8.6 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N)

CVSS v3: Not provided

CWE: None listed

Source: ENISA

Description

SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admin_double due to improper processing of the values in the ID field included in the selected_grp_dupli[] parameter. An authenticated user with operator privileges can manipulate these values to alter the SQL queries executed by the application and retrieve information stored in the database.

Timestamps

Normalized: 2026-09-03T11:13:06Z UTC
Last updated: 2026-09-03T11:13:06Z UTC

References

No references provided.

VulnAI

EUVD-2026-70371

Description

Timestamps

References