Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fhhm-4gp8-h265

Опубликовано: 06 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A SQL injection vulnerability has been identified in Uniclare Student Portal v2. This flaw allows remote attackers to inject arbitrary SQL commands via vulnerable input fields, enabling the execution of time-delay functions to infer database responses.

A SQL injection vulnerability has been identified in Uniclare Student Portal v2. This flaw allows remote attackers to inject arbitrary SQL commands via vulnerable input fields, enabling the execution of time-delay functions to infer database responses.

EPSS

Процентиль: 57%
0.00357
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
nvd
4 месяца назад

A SQL injection vulnerability has been identified in Uniclare Student Portal v2. This flaw allows remote attackers to inject arbitrary SQL commands via vulnerable input fields, enabling the execution of time-delay functions to infer database responses.

EPSS

Процентиль: 57%
0.00357
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89