Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2q7g-85wh-78fq

Опубликовано: 06 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

A SQL Injection vulnerability has been identified in EPICOR Prophet 21 (P21) up to 23.2.5232. This vulnerability allows authenticated remote attackers to execute arbitrary SQL commands through unsanitized user input fields to obtain unauthorized information

A SQL Injection vulnerability has been identified in EPICOR Prophet 21 (P21) up to 23.2.5232. This vulnerability allows authenticated remote attackers to execute arbitrary SQL commands through unsanitized user input fields to obtain unauthorized information

EPSS

Процентиль: 22%
0.00073
Низкий

8.1 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 8.1
nvd
11 месяцев назад

A SQL Injection vulnerability has been identified in EPICOR Prophet 21 (P21) up to 23.2.5232. This vulnerability allows authenticated remote attackers to execute arbitrary SQL commands through unsanitized user input fields to obtain unauthorized information

EPSS

Процентиль: 22%
0.00073
Низкий

8.1 High

CVSS3

Дефекты

CWE-89