CVE-2025-55156 PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter
Discription

pyLoad is the free and open-source Download Manager written in pure Python. Prior to version 0.5.0b3.dev91, the parameter add_links in API /json/add_package is vulnerable to SQL Injection. Attackers can modify or delete data in the database, causing data errors or loss. This issue has been patched in version…Read More
References
Back to Main