Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attackers to extract confidential information (such as the version and type of backend used), alter data or further compromise the CRM environment.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-12260 is a CVSS 10.0 SQL injection in NetBoard CRM Demo Platform. It affects the user-name parameter in /module/auth/recovery.php and can enable data extraction, modification, or compromise. No public exploit found. https://exploitgrid.net/vulnerabilities #CyberSecurity #SQLInjection