
CVE-2026-74251
Unauthenticated SQL Injection via Attribute Filter in Phoca Cart - CVSS 9.3
database-securitydata-exfiltrationexploitation+3

Unauthenticated SQL Injection via Attribute Filter in Phoca Cart - CVSS 9.3

Proof-of-concept exploit for CVE-2024-0399, a post-authenticated time-based SQL injection in WooCommerce Customers Manager 29.4, targeting…

Nexter <= 2.0.3 - Authenticated (Subscriber+) SQL Injection via 'to' and 'from'