Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cgvh-9643-55w4

Опубликовано: 18 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/mail/main/select_send.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/mail/main/select_send.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.

EPSS

Процентиль: 15%
0.00048
Низкий

8.2 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 8.2
nvd
почти 2 года назад

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/mail/main/select_send.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.

EPSS

Процентиль: 15%
0.00048
Низкий

8.2 High

CVSS3

Дефекты

CWE-89