Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:osclass:osclass:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Osclass: SQL Injection in Item Model Handler (CVE-2026-113381)

Osclass versions up to 8.3.1 are vulnerable to a remote SQL injection attack due to insufficient sanitization of the sPattern argument in the Item::findUserItems function.

Osclass web-application sql-injection cve-2026-113381
1t 1c