Описание
Multiple SQL injection vulnerabilities in ReciPants 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) user id, (2) recipe id, (3) category id, and (4) other ID number fields.
Ссылки
- PatchVendor Advisory
- Patch
- Patch
- Patch
- PatchVendor Advisory
- Patch
- Patch
- Patch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:recipants:recipants:1.0:*:*:*:*:*:*:*
cpe:2.3:a:recipants:recipants:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:recipants:recipants:1.1:*:*:*:*:*:*:*
cpe:2.3:a:recipants:recipants:1.1.1:*:*:*:*:*:*:*
EPSS
Процентиль: 65%
0.01211
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
Multiple SQL injection vulnerabilities in ReciPants 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) user id, (2) recipe id, (3) category id, and (4) other ID number fields.
EPSS
Процентиль: 65%
0.01211
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other