<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 19 Jun 2026 23:21:00 +0000</lastBuildDate>
    <item>
      <title>3e842ae3-2845-4577-ab9b-a56dd0bfe1f2</title>
      <link>https://vulnerability.circl.lu/sighting/3e842ae3-2845-4577-ab9b-a56dd0bfe1f2/export</link>
      <description>{"uuid": "3e842ae3-2845-4577-ab9b-a56dd0bfe1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-41262", "type": "seen", "source": "https://t.me/cibsecurity/72212", "content": "\u203c CVE-2023-41262 \u203c\n\nAn issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV is vulnerable to SQL injection through the sorting parameter, allowing an unauthenticated user to execute arbitrary SQL statements in the context of the application's backend database server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-13T02:36:52.000000Z"}</description>
      <content:encoded>{"uuid": "3e842ae3-2845-4577-ab9b-a56dd0bfe1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-41262", "type": "seen", "source": "https://t.me/cibsecurity/72212", "content": "\u203c CVE-2023-41262 \u203c\n\nAn issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV is vulnerable to SQL injection through the sorting parameter, allowing an unauthenticated user to execute arbitrary SQL statements in the context of the application's backend database server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-13T02:36:52.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3e842ae3-2845-4577-ab9b-a56dd0bfe1f2/export</guid>
      <pubDate>Fri, 13 Oct 2023 02:36:52 +0000</pubDate>
    </item>
  </channel>
</rss>
