https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:15:55 +0000 https://db.gcve.eu/vuln/cve-2026-3843 <p><strong>Affected:</strong> Nefteprodukttekhnika LLC BUK TS-G Gas Station Automation System</p> <p>Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 on Linux contains a SQL Injection vulnerability (CWE-89) in the system configuration module. A remote attacker can send specially crafted HTTP POST requests to the /php/request.php endpoint via the sql parameter in application/x-www-form-urlencoded data (e.g., action=do&amp;sql=&lt;query_here&gt;&amp;reload_driver=0) to execute arbitrary SQL commands and potentially achieve remote code execution.</p> <p><strong>Affected:</strong> Nefteprodukttekhnika LLC BUK TS-G Gas Station Automation System</p> <p>Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 on Linux contains a SQL Injection vulnerability (CWE-89) in the system configuration module. A remote attacker can send specially crafted HTTP POST requests to the /php/request.php endpoint via the sql parameter in application/x-www-form-urlencoded data (e.g., action=do&amp;sql=&lt;query_here&gt;&amp;reload_driver=0) to execute arbitrary SQL commands and potentially achieve remote code execution.</p> https://db.gcve.eu/vuln/cve-2026-3843