iomad Company Admin Block sql injection_CVE-2026-1517

5.1 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was identified in iomad up to 5.0. Affected is an unknown function of the component Company Admin Block. Such manipulation leads to sql injection. The attack can be executed remotely. Upgrading to version 4.5 LTS and 5.0 is able to address this issue. You should upgrade the affected component.

Basic Information

ID CVE-2026-1517

Source VulDB

Published Feb 5, 2026 at 12:02

Affected Product

Vendor n/a

Product iomad

Version 3.1

Affected Versions n/a iomad 3.1
n/a iomad 3.2
n/a iomad 3.3
n/a iomad 3.4
n/a iomad 3.5
n/a iomad 3.6
n/a iomad 3.7
n/a iomad 3.8
n/a iomad 3.9
n/a iomad 3.10
n/a iomad 3.11
n/a iomad 4.0
n/a iomad 4.1
n/a iomad 4.2
n/a iomad 4.3
n/a iomad 4.4
n/a iomad 4.5
n/a iomad 5.0

CWE Classification

CWE-89 CWE-74

References

{
    "lastseen": "",
    "description": "A vulnerability was identified in iomad up to 5.0. Affected is an unknown function of the component Company Admin Block. Such manipulation leads to sql injection. The attack can be executed remotely. Upgrading to version 4.5 LTS and 5.0 is able to address this issue. You should upgrade the affected component.",
    "published": "2026-02-05T12:02:06.834Z",
    "modified": "2026-02-05T12:02:06.834Z",
    "type": "cve",
    "title": "iomad Company Admin Block sql injection",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.344487\nhttps://vuldb.com/?ctiid.344487\nhttps://github.com/iomad/iomad/issues/2559\nhttps://github.com/iomad/iomad/issues/2559#issuecomment-3841174677\nhttps://github.com/iomad/iomad/",
    "id": "CVE-2026-1517",
    "bulletinFamily": "",
    "cwe": [
        "CWE-89",
        "CWE-74"
    ],
    "cvelist": null,
    "sourceData": "n/a iomad 3.1\nn/a iomad 3.2\nn/a iomad 3.3\nn/a iomad 3.4\nn/a iomad 3.5\nn/a iomad 3.6\nn/a iomad 3.7\nn/a iomad 3.8\nn/a iomad 3.9\nn/a iomad 3.10\nn/a iomad 3.11\nn/a iomad 4.0\nn/a iomad 4.1\nn/a iomad 4.2\nn/a iomad 4.3\nn/a iomad 4.4\nn/a iomad 4.5\nn/a iomad 5.0",
    "sourceHref": "",
    "cvss": {
        "score": 5.1,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "iomad",
    "version": "3.1",
    "vendor": "n/a",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}