EUVD-2026-66814
GHSA-8ccj-65r3-7pgg
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Network-reachable SQLi with no confirmed auth gate gives AV:N/AC:L/PR:N/UI:N and full C/I/A via total database impact; PR:N is retained but uncertain given the /sys/ backend context.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json.
AnalysisAI
SQL injection in Funiture 1.0.0 lets remote unauthenticated attackers manipulate backend database queries through the /sys/tool/select.json and /sys/tool/update.json tool-management endpoints (CWE-89). Publicly available exploit code exists (a GitHub write-up and VulDB entry), though the flaw is not listed in CISA KEV and its EPSS probability is low (0.14%, 4th percentile), suggesting no widespread automated exploitation yet despite a CVSS of 9.8.
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The specific prerequisites are that the target runs Funiture 1.0.0 and exposes the backend tool endpoints /sys/tool/select.json (read path) and /sys/tool/update.json (write path) to the attacker. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are mixed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A remote attacker discovers an exposed Funiture 1.0.0 instance and sends a crafted request to /sys/tool/select.json with a manipulated parameter that injects SQL, dumping credentials or other sensitive rows from the database. Using the same technique against /sys/tool/update.json, they modify or destroy records, achieving total confidentiality, integrity, and availability impact. … |
| Remediation | No vendor-released patch or fixed version was identified in the available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Funiture 1.0.0 instances and disable or restrict network access to /sys/tool/select.json and /sys/tool/update.json endpoints; deploy Web Application Firewall rules blocking SQL injection patterns. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today