Skip to content
OpenAdvisories

Vendor

danielbrendel

4 known vulnerabilities.

Products

hortusfox-web 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-108100

    HortusFox before 6.2 SQL Injection via /api/locations/list include_info Parameter

    HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include_info values to the /api/locations/list endpoint. Attackers can place subqueries in include_info, which Plants…

    danielbrendel hortusfox-web