Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mw28-fqq6-34jq

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by setting the vgn_creds cookie to an arbitrary value and directly accessing the save template.

Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by setting the vgn_creds cookie to an arbitrary value and directly accessing the save template.

EPSS

Процентиль: 69%
0.0061
Низкий

Связанные уязвимости

nvd
больше 22 лет назад

Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by setting the vgn_creds cookie to an arbitrary value and directly accessing the save template.

EPSS

Процентиль: 69%
0.0061
Низкий