{"id":"CVE-2026-79573","title":"L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component via the busid, id, and taskid parameters","summary":"L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component via the busid, id, and taskid parameters. This vulnerability allows attackers to access sensitive database i…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-89"],"published":"2026-09-08","updated":"2026-09-14","sourceUpdated":"2026-09-14T14:17:10.537","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-79573","references":[{"url":"https://github.com/fangtang7/CVE/blob/main/L-ONE/JFinalOA%20SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md","label":"cve@mitre.org"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-14T13:29:19.678060Z"},"epss":0.00266,"epssPercentile":0.18731,"ingestedAt":"2026-09-08T15:33:26.986Z","slug":"CVE-2026-79573","body":"## Overview\n\nL-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component via the busid, id, and taskid parameters. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201980,"id":"CVE-2026-79573","ts":1789399993470,"field":"cvss","old":null,"new":"6.5"},{"seq":201979,"id":"CVE-2026-79573","ts":1789399993470,"field":"severity","old":"none","new":"medium"},{"seq":200707,"id":"CVE-2026-79573","ts":1789397585539,"field":"cvss","old":"6.5","new":null},{"seq":200706,"id":"CVE-2026-79573","ts":1789397585539,"field":"severity","old":"medium","new":"none"},{"seq":200097,"id":"CVE-2026-79573","ts":1789395646902,"field":"cvss","old":null,"new":"6.5"},{"seq":200096,"id":"CVE-2026-79573","ts":1789395646902,"field":"severity","old":"none","new":"medium"}]}