Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593. Impacted is an unknown function of the file admin/deletecourse.php of the component GET Request Parameter Handler. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-17 | 2 | Disclosure1General1 |
| 2026-04-19 | 1 | Disclosure1 |
CVE-2026-6490 A weakness has been identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593. Impacted is an unknown function of the file admin/deletecourse.php of th… https://www.cve.org/CVERecord?id=CVE-2026-6490
Post summary
A new vulnerability (CVE-2026-6490) has been reported in QueryMine SMS, affecting an unknown function in admin/deletecourse.php, with a reference to the official CVE record.
CVE-2026-6490 SQL Injection in QueryMine SMS via GET Request Parameter ID https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6490
Post summary
The text discloses a SQL Injection vulnerability in QueryMine SMS via the GET request ID parameter, but presents no PoC, exploit code, patch information, or evidence of active exploitation.
CVE-2026-6490: Cisco IOS XE Authentication Bypass - What It Means for Your Business and How to Respond https://hubs.li/Q04cyF4X0
Post summary
The snippet provides only a title referencing CVE‑2026‑6490 and a generic link, with no concrete technical or operational details or actionable guidance.