Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mf7p-qx2j-rmq3

Опубликовано: 15 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

DigiWin EasyFlow .NET lacks validation for certain input parameters, allowing remote attackers to inject arbitrary SQL commands. This vulnerability enables unauthorized access to read, modify, and delete database records, as well as execute system commands.

DigiWin EasyFlow .NET lacks validation for certain input parameters, allowing remote attackers to inject arbitrary SQL commands. This vulnerability enables unauthorized access to read, modify, and delete database records, as well as execute system commands.

EPSS

Процентиль: 69%
0.00591
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
nvd
больше 1 года назад

DigiWin EasyFlow .NET lacks validation for certain input parameters, allowing remote attackers to inject arbitrary SQL commands. This vulnerability enables unauthorized access to read, modify, and delete database records, as well as execute system commands.

EPSS

Процентиль: 69%
0.00591
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89