Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2wwg-wcjv-q464

Опубликовано: 21 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.8
CVSS3: 7.5

Описание

Part-DB 0.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to login by injecting SQL syntax into authentication parameters. Attackers can submit a single quote followed by 'or' in the login form to bypass credential validation and gain unauthorized access to the application.

Part-DB 0.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to login by injecting SQL syntax into authentication parameters. Attackers can submit a single quote followed by 'or' in the login form to bypass credential validation and gain unauthorized access to the application.

EPSS

Процентиль: 27%
0.00351
Низкий

8.8 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.5
nvd
6 месяцев назад

Part-DB 0.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to login by injecting SQL syntax into authentication parameters. Attackers can submit a single quote followed by 'or' in the login form to bypass credential validation and gain unauthorized access to the application.

EPSS

Процентиль: 27%
0.00351
Низкий

8.8 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-89