https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T19:44:39.531101+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-50769 fkie_cve-2026-50769 2026-09-28T19:44:39.549202+00:00

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection (time-based) vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is vulnerable to SQL injection allowing an attacker to execute arbitrary code.

 https://db.gcve.eu/vuln/ghsa-jwww-rvpp-fjf3 GHSA-jwww-rvpp-fjf3 2026-09-28T19:44:39.549486+00:00

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection (time-based) vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is vulnerable to SQL injection allowing an attacker to execute arbitrary code.