Alertas de Seguridad de la Información

M Alto vulnerabilidad

13/10/2026

[CVE-2026-108968] A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected elem…

A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/sales_history.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-108966] A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affect…

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-108967] A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is …

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/edit_credit.php. The manipulation of the argument credit results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-108965] A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerabilit…

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_quantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-108964] A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknow…

A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-108956] A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is …

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-109573] phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes s…

phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backslashes that are treated literally when MySQL or MariaDB runs in NO_BACKSLASH_ESCAPES mode. Unauthenticated attackers can send a Unicode right single quotation mark in the search parameter of api/autocomplete, which is normalized to an ASCII quote, to read credentials and confi…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-65954] PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffer. From 1.0.0-alpha1 until 1.2…

PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffer. From 1.0.0-alpha1 until 1.2.3, PHPCSUtils\AbstractSniffs\AbstractArrayDeclarationSniff::getActualArrayKey() evaluates attacker-controlled array-key expressions with eval(), allowing callback-form keys in untrusted PHP code scanned by an extending sniff to execute arbitrary commands on the scanning host. Known reachable paths …

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-108921] A vulnerability was detected in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384…

A vulnerability was detected in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This impacts the function mysql_query of the file remove_announcements.php of the component State-Changing Endpoints. Performing a manipulation of the argument ID results in missing authentication. The attack may be initiated remotely. The exploit is now public and may be used. T…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-109357] LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization …

LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames are inserted unescaped into LDAP search filters and authentication only checks user existence. When REMOTE_USER is not forwarded, unauthenticated attackers can send a wildcard username via HTTP Basic Authorization (PHP_AUTH_USER) to match all users and groups and gain admin a…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-109353] LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inj…

LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notification_id parameter to notifications.inc.php. Attackers can perform cross-table reads of users.password hashes, with results persisted in notifications_attribs and readable through the interface.

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-109347] Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite…

Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PHP code to execute it as the web server user.

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-109318] Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authentica…

Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full name, or email that reaches PHP exec() via git commit --author, running commands as the web-server accou…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-109305] Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to i…

Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some" and "has every" operators. Users with the System Messages permission can supply two-argument callables such as passthru or system in sandboxed templates to execute code as the web user.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-109397] Thelia before 3.1.2 and 3.2.x before 3.2.1 contains an unrestricted file upload vulnerability that a…

Thelia before 3.1.2 and 3.2.x before 3.2.1 contains an unrestricted file upload vulnerability that allows authenticated back-office users to upload PHP files by appending a trailing space to filenames. FileProcessorService validates the raw filename but FileManager::sanitizeFileName() strips the space, storing an executable .php file under public/cache/documents/ for code execution as the web serv…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-109398] Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageRes…

Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD imagecreatefrom* functions without pixel limits. Remote attackers can upload small, highly compressed images that decode to large bitmaps, exhausting PHP memory and terminating the worker process.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-108900] A vulnerability has been found in Exponent CMS up to 3.0.2patch2. Affected is the function userLogin…

A vulnerability has been found in Exponent CMS up to 3.0.2patch2. Affected is the function userLogin of the file xmlrpc.php of the component XML-RPC. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-103521] In Thelia v2.6.0, the document upload endpoint properly blocks the upload of executable file types, …

In Thelia v2.6.0, the document upload endpoint properly blocks the upload of executable file types, but the document update endpoint does not perform the same validation. An attacker with administrative Thelia permissions can exploit this vulnerability to upload arbitrary executable files, such as malicious PHP scripts, to achieve remote code execution on the underlying server.

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-103522] In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that rel…

In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client‑supplied MIME types. An attacker with administrative access can upload a PHP file disguised as an image to bypass validation and achieve remote code execution on the underlying server.

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

12/10/2026

Inyección SQL alta en Zen Cart afecta manejador de pagos PayPal

Se identificó una vulnerabilidad de inyección SQL en Zen Cart versiones hasta 2.2.2 que afecta la función zen_db_perform en el manejador IPN de PayPal (paypaldp.php). Un atacante puede manipular el parámetro txn_id para ejecutar consultas SQL maliciosas de forma remota. El exploit es público y operativo, impactando directamente tiendas de comercio electrónico en LATAM que procesan pagos con PayPal integrado.

nvdaltovulnerabilidad CVSS 7.3 NVD