https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-19T19:57:20.575601+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-108065 fkie_cve-2026-108065 2026-10-19T19:57:20.601921+00:00

SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID parameter value containing a single quote and stacked SQL query.

 https://db.gcve.eu/vuln/ghsa-gjqg-f9ch-24cr GHSA-gjqg-f9ch-24cr 2026-10-19T19:57:20.602142+00:00

SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID parameter value containing a single quote and stacked SQL query.