Topic

SQL Injection

Reporting and analysis related to SQL Injection.

Articles: 1
Desk: 1

Data graphic: A CVSS 9.8 unauthenticated SQL injection, CVE-2026-108065, in Channel Software WebAlliance eCommerce. The word PATCH is struck out, the vendor response is none, and the only fix is to block /preapproval.asmx.

Unpatched SQL injection in Channel Software WebAlliance eCommerce: block /preapproval.asmx

CVE-2026-108065, an unauthenticated 9.8 SQL injection in WebAlliance eCommerce, is public with no patch after the vendor ignored Rapid7. Block /preapproval.asmx.

Oct 18 · 3 min