Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 15:08:42 +0000 CVE-2026-109169 — LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter https://db.gcve.eu/vuln/cve-2026-109169 <p><strong>Affected:</strong> LogicalDOC Community Edition</p> <p>LogicalDOC Community Edition through 9.3 contains a sql injection vulnerability that allows authenticated users to execute crafted SQL via the firstLetter parameter of TagsDataServlet. Low-privileged attackers can inject UNION SELECT statements returned in the XML tag list to read usernames, email addresses and password hashes from ld_user.</p> <p><strong>Affected:</strong> LogicalDOC Community Edition</p> <p>LogicalDOC Community Edition through 9.3 contains a sql injection vulnerability that allows authenticated users to execute crafted SQL via the firstLetter parameter of TagsDataServlet. Low-privileged attackers can inject UNION SELECT statements returned in the XML tag list to read usernames, email addresses and password hashes from ld_user.</p> https://db.gcve.eu/vuln/cve-2026-109169