CVE-2026-89310 in JTL WMS
Resumen
por MITRE • 2026-10-14
A parameter taken from the request body is inserted into a T-SQL statement without parameterization or escaping, allowing a remote attacker to execute arbitrary SQL statements in the context of the application's database account.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.