SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-57771

HIGH · CVSS 8.5 EPSS 0.25%

Source: NVD + CISA KEV + EPSS · Published 2026-07-13 · Last synced 2026-08-12

CyberRota Analysis

AI-Generated

The GD Rating System versions up to and including 3.7 are vulnerable to a Blind SQL Injection attack due to improper neutralization of special elements in SQL commands. This vulnerability could allow an attacker to manipulate database queries, potentially leading to unauthorized data access or data leakage. Organizations using affected versions of the GD Rating System should prioritize remediation to mitigate the risk of exploitation.

CVE
CVE-2026-57771
Severity
HIGH
CVSS
8.5
EPSS
0.25%

Original NVD Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Rating System gd-rating-system allows Blind SQL Injection.This issue affects GD Rating System: from n/a through <= 3.7.