Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mqp2-c8p6-vr7h

Опубликовано: 18 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

SUNNET WMPro portal's FAQ function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to obtain sensitive information via a database.

SUNNET WMPro portal's FAQ function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to obtain sensitive information via a database.

EPSS

Процентиль: 22%
0.00071
Низкий

7.5 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.5
nvd
больше 2 лет назад

SUNNET WMPro portal's FAQ function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to obtain sensitive information via a database.

EPSS

Процентиль: 22%
0.00071
Низкий

7.5 High

CVSS3

Дефекты

CWE-89