https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T21:50:12.990760+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2008-0546 fkie_cve-2008-0546 2026-10-09T21:50:13.005202+00:00

Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the (1) idProduct and (2) options parameters to (a) ajax/ajax_optInventory.asp, or the (2) recid parameter to (b) ajax/ajax_getBrands.asp.

 https://vulnerability.circl.lu/vuln/ghsa-3wpp-3rf9-gggw GHSA-3wpp-3rf9-gggw 2026-10-09T21:50:13.005331+00:00

Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the (1) idProduct and (2) options parameters to (a) ajax/ajax_optInventory.asp, or the (2) recid parameter to (b) ajax/ajax_getBrands.asp.

 https://vulnerability.circl.lu/vuln/gsd-2008-0546 gsd-2008-0546 2026-10-09T21:50:13.005368+00:00 gsd-2008-0546