Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4498-28jp-m89x

Опубликовано: 22 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via the sauvegardes variable through the /admin/sauvegarde/run.php endpoint.

A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via the sauvegardes variable through the /admin/sauvegarde/run.php endpoint.

EPSS

Процентиль: 60%
0.00399
Низкий

7.2 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.2
nvd
почти 2 года назад

A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via the sauvegardes variable through the /admin/sauvegarde/run.php endpoint.

EPSS

Процентиль: 60%
0.00399
Низкий

7.2 High

CVSS3

Дефекты

CWE-89