CVE-2026-31158EUVD-2026-109964GHSA-5632-5634-2R6Q
SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbitrary code via the Lo
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- 1 proof of concept on GitHub
CISA SSVC
- Exploitation: poc
- Automatable: yes
- Technical impact: total
?
Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).
SSVC documentationSummary
The CRM SOFTTRADE Infotech (softtradeindia) application is affected by an SQL injection flaw in its login page. A remote attacker could exploit this to run arbitrary code on the system.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbitrary code via the Login Page
Timeline
- CVE published
- First seen by cve.now
- CISA SSVC assessment
Exploitation: poc · Automatable: yes · Technical impact: total
- Record last updated
- Posted on X by cve.now
Affected versions
No affected packages have been listed by the sources.