Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2m78-3m48-94h8

Опубликовано: 20 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin board is running.

SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin board is running.

EPSS

Процентиль: 85%
0.02479
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 8.8
nvd
около 3 лет назад

SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin board is running.

EPSS

Процентиль: 85%
0.02479
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89