Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h52g-q78r-649c

Опубликовано: 18 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/person/pic_show.php, in the 'person_id' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/person/pic_show.php, in the 'person_id' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.

EPSS

Процентиль: 15%
0.00048
Низкий

8.2 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 8.2
nvd
почти 2 года назад

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/person/pic_show.php, in the 'person_id' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.

EPSS

Процентиль: 15%
0.00048
Низкий

8.2 High

CVSS3

Дефекты

CWE-89