CVE-2026-3200

Medium CVSS: 6.9

A vulnerability was identified in z-9527 admin 1.0/2.0. The affected element is the function checkName/register/login/getUser/getUsers of the file /server/controller/user.js. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Vendor

Product

CWE

CWE-74

Yayın Tarihi

2026-02-25 21:16:45

Güncelleme

2026-02-27 14:06:59

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-74 MEDIUM 2026

Referanslar

https://github.com/CC-T-454455/Vulnerabilities/tree/master/z9527-admin/vulnerability-1 https://github.com/CC-T-454455/Vulnerabilities/tree/master/z9527-admin/vulnerability-2 https://vuldb.com/?ctiid.347772 https://vuldb.com/?id.347772 https://vuldb.com/?submit.758325 https://vuldb.com/?submit.758326 https://vuldb.com/?submit.758327 https://vuldb.com/?submit.758328 https://vuldb.com/?submit.758330