CVE Intelligence

Sitzungsdienst vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Sitzungsdienst products: 1 record(s), with severity, exploitation and fixes.

SD.NET RIM 1

Exploited only (KEV) →

CVE-2019-25359 High · 8.2 CWE-352 Feb 18, 2026
SD.NET RIM 4.7.3c - 'idtyp' SQL Injection
SD.NET RIM versions before 4.7.3c contain a SQL injection vulnerability that allows attackers to inject malicious SQL statements through POST parameters 'idtyp' and 'idgremium'. Attackers can exploit this vulnerability by crafting specially formed POST requests to the /vorlagen/ endpoint, enabling unauthorized database manipulation and potential information disclosure.