Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qfr3-mfc8-5fjx

Опубликовано: 24 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input data. The parameters passed from the front end to the back end are controllable, which will lead to SQL injection.

Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input data. The parameters passed from the front end to the back end are controllable, which will lead to SQL injection.

EPSS

Процентиль: 26%
0.00093
Низкий

8.8 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 8.8
nvd
почти 3 года назад

Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input data. The parameters passed from the front end to the back end are controllable, which will lead to SQL injection.

EPSS

Процентиль: 26%
0.00093
Низкий

8.8 High

CVSS3

Дефекты

CWE-89