Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vrj2-8hr4-9mhm

Опубликовано: 23 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9.3
CVSS3: 8.2

Описание

WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database information and potentially access sensitive system data.

WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database information and potentially access sensitive system data.

EPSS

Процентиль: 23%
0.00077
Низкий

9.3 Critical

CVSS4

8.2 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.5
nvd
около 2 месяцев назад

WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database information and potentially access sensitive system data.

EPSS

Процентиль: 23%
0.00077
Низкий

9.3 Critical

CVSS4

8.2 High

CVSS3

Дефекты

CWE-89