{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/osclass/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:osclass:osclass:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-113381"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Osclass (\u003c= 8.3.1)"],"_cs_severities":["high"],"_cs_tags":["web-application","sql-injection","cve-2026-113381"],"_cs_type":"advisory","_cs_vendors":["Osclass"],"content_html":"\u003cp\u003eOsclass versions up to 8.3.1 contain a critical SQL injection vulnerability in the Item::findUserItems function, located within the file 'oc-includes/osclass/model/Item.php'. The vulnerability arises from improper sanitization of the 'sPattern' argument passed to the Item Model Handler. A remote attacker can exploit this flaw by submitting crafted input to the affected parameter, potentially allowing unauthorized access to the database or sensitive information disclosure. Public exploit code for this vulnerability is currently available, posing an immediate risk to installations that have not implemented compensating controls. Despite early disclosure attempts, the vendor has not responded or provided a patch, leaving legacy versions susceptible to exploitation.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this SQL injection vulnerability allows remote attackers to manipulate backend database queries, which could lead to unauthorized data extraction, database modification, or complete compromise of the underlying database application. Organizations running Osclass versions 8.3.1 or older are at risk of data breach and loss of service integrity.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all public-facing instances of Osclass version 8.3.1 or older and restrict access to the web interface via a Web Application Firewall (WAF) until the vulnerability is addressed by the vendor or internal patches are applied.\u003c/li\u003e\n\u003cli\u003eImplement strict input validation on the application layer for the 'sPattern' parameter to ensure it does not contain malicious SQL metacharacters.\u003c/li\u003e\n\u003cli\u003eMonitor database query logs for unusual syntax patterns, such as UNION statements or comment indicators, originating from web traffic to the application.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-20T10:32:50Z","date_published":"2026-10-20T10:32:50Z","id":"https://feed.craftedsignal.io/briefs/2026-10-osclass-sql-injection/","summary":"Osclass versions up to 8.3.1 are vulnerable to a remote SQL injection attack due to insufficient sanitization of the sPattern argument in the Item::findUserItems function.","title":"Osclass: SQL Injection in Item Model Handler (CVE-2026-113381)","url":"https://feed.craftedsignal.io/briefs/2026-10-osclass-sql-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - Osclass","version":"https://jsonfeed.org/version/1.1"}