CVE-2026-4173 | CodePhiliaX Chat2DB up to 0.3.7 Database Export DMDBManage.java sql injection

A vulnerability, which was classified as critical, has been found in CodePhiliaX Chat2DB up to 0.3.7. This vulnerability affects the function exportTable/exportTableColumnComment/exportView/exportProcedure/exportTriggers/exportTrigger/updateProcedure of the file DMDBManage.java of the component Database Export Handler. This manipulation causes sql injection.

The identification of this vulnerability is CVE-2026-4173. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.