Description
SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint
Critical · 9.8
CVE-2025-66944
EUVD-2025-208283GHSA-v9pc-fp33-jwc2
SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query para…
Published Mar 4, 2026 · Updated Mar 5, 2026 · Assigned by mitre