Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9m9c-g4c8-j95g

Опубликовано: 22 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query.

SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query.

EPSS

Процентиль: 33%
0.00129
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query.

EPSS

Процентиль: 33%
0.00129
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89