Vulnerabilidades de Varient

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Varient: 1 registro(s), com severidade, exploração e correções.

Varient SQL Inj. 1

Somente exploradas (KEV) →

CVE-2019-25486 Alta · 8.2 CWE-89 11/03/2026

Varient 1.6.1 SQL Injection via user_id Parameter

Varient 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user_id parameter. Attackers can submit POST requests with crafted SQL payloads in the user_id field to bypass authentication and extract sensitive database information.