CVE-2026-30711

Published: Mar 19, 2026 Last Modified: Mar 19, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/session.inc.php file via the referer and user-agent.

https://breakpoint.purrfect.fr/article/grr_audit.html
https://breakpoint.purrfect.fr/article/grr_audit.html
https://breakpoint.purrfect.fr/article/grr_audit.html#v4-sq…
https://breakpoint.purrfect.fr/article/grr_audit.html#v4-sql-injection-in-sessi…