Описание
Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) order_by or (2) direction parameter to admin/users.php, or (3) configuration options to admin/settings.php.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:punbb:punbb:1.3:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.3.1:*:*:*:*:*:*:*
EPSS
Процентиль: 63%
0.01094
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-89
Связанные уязвимости
github
больше 4 лет назад
Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) order_by or (2) direction parameter to admin/users.php, or (3) configuration options to admin/settings.php.
EPSS
Процентиль: 63%
0.01094
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-89