Описание
A vulnerability, which was classified as critical, has been found in Itech Freelancer Script 5.13. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument sk leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Ссылки
- Permissions RequiredThird Party Advisory
- ExploitThird Party AdvisoryVDB Entry
- Permissions RequiredThird Party Advisory
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:itechscripts:freelancer_script:5.13:*:*:*:*:*:*:*
EPSS
Процентиль: 54%
0.0031
Низкий
6.3 Medium
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-89
CWE-89
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
A vulnerability, which was classified as critical, has been found in Itech Freelancer Script 5.13. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument sk leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
EPSS
Процентиль: 54%
0.0031
Низкий
6.3 Medium
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-89
CWE-89