SA-2026-33：SQLI in OrderBy Parameters　 - #158

Open

Chen-LiYin wants to merge 14 commits into

NETivism:developfrom

Chen-LiYin:develop-47100

Commits on Aug 6, 2026

Refs #47100,feat:SA-2026-19：Stored XSS in Grant Type
Chen-LiYin
committed
6fa1da6
Refs #47100,feat:SA-2026-20：Stored XSS in Website URL
Chen-LiYin
committed
9fef1e4
Refs #47100,feat:SA-2026-21,SA-2026-27：Event Template Title / Participant Status XSS
Chen-LiYin
committed
6ab001e
Refs #47100,feat:SA-2026-22：Stored XSS in Membership Type,SA-2026-23：Stored XSS in Price Field label
Chen-LiYin
committed
93f8198
Refs #47100,feat:SA-2026-25：Stored XSS in Tag Name
Chen-LiYin
committed
95a14df
Refs #47100,feat:SA-2026-26：Unauthorized access to Files via APIv3
Chen-LiYin
committed
a697da8
Refs #47100,feat:SA-2026-28：Escalation via Extension Download API
Chen-LiYin
committed
c8f1111
Refs #47100,feat:SA-2026-30：Stored XSS in File Attachments
Chen-LiYin
committed
cddc1bf
Refs #47100,feat:SA-2026-31：SQLI in GroupContact Create APIv3
Chen-LiYin
committed
c517b97
Refs #47100,feat:SA-2026-32：Stored XSS in Profile Help
Chen-LiYin
committed
df58c19
Refs #47100,feat:SA-2026-24：RCE via File API
Chen-LiYin
committed
1a0035d
Refs #47100,feat:SA-2026-24：RCE via File API
Chen-LiYin
committed
ca7adb3
Merge branch 'develop' of github.com:Chen-LiYin/netiCRM into develop
Chen-LiYin
committed
e1e71e7

Commits on Aug 7, 2026

Refs #47100,feat:SA-2026-33：SQLI in OrderBy Parameters
Chen-LiYin
committed
58d8f6c