critical
advisory
Participants Database: Blind SQL Injection (CVE-2026-112860)
Participants Database (xnau webdesign) versions from n/a through 2.7.8.5 are affected by a Blind SQL Injection vulnerability.
CVE search metadata
CVE search record: CVE-2026-112860. Severity: critical. CVSS: 9.3. KEV: no. Product: Participants Database (n/a - 2.7.8.5). Brief: Participants Database: Blind SQL Injection (CVE-2026-112860). Brief link: https://feed.craftedsignal.io/briefs/2026-10-participants-database-sql-injection/
Triage facts
Revision 1- Applicability
- Participants Database (n/a - 2.7.8.5)
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 1 public source
- Freshness
- Revision 1Oct 23, 09:35 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Participants Database (xnau webdesign) contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. This issue allows for Blind SQL Injection and affects versions from n/a through 2.7.8.5.