Skip to content
OpenAdvisories

Vendor

Yiuman

1 known vulnerabilities.

Products

citrus 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-110614

    Yiuman citrus through 0.15.0 ORDER BY SQL Injection via sortBy Parameter

    Yiuman citrus through 0.15.0 contains an ORDER BY sql injection vulnerability in the citrus-support generic query framework that allows users to inject SQL via the sortBy request parameter. Attackers can reach any generic list route of controllers extending B…

    Yiuman citrus