Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search() function.

Published May 6, 2024 · Updated Nov 21, 2024 · Assigned by mitre