https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-09T17:39:37.204487+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2025-71428 CVE-2025-71428 — Jivejdon through 5.0 SQL Injection via username in userListAction 2026-10-09T17:39:37.324045+00:00

Affected: banq jivejdon

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents, including other accounts' password hashes.