CVE-2019-25693 | BDVDB-2026-326458 Detail

Description#

ResourceSpace 8.6 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the keywords parameter in collection_edit.php. Attackers can submit POST requests with crafted SQL payloads in the keywords field to extract sensitive database information including schema names, user credentials, and other confidential data.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-04-12Record published in the CVE List.
2. Version 22026-07-15Most recent update recorded in the CVE List.