Описание
An issue was discovered in DonLinkage 6.6.8. SQL injection in /pages/proxy/php.php and /pages/proxy/add.php can be exploited via specially crafted input, allowing an attacker to obtain information from a database. The vulnerability can only be triggered by an authorized user.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:i4a:donlinkage:6.6.8:*:*:*:*:*:*:*
EPSS
Процентиль: 37%
0.00162
Низкий
5.4 Medium
CVSS3
5.5 Medium
CVSS2
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 5.4
github
больше 3 лет назад
An issue was discovered in DonLinkage 6.6.8. SQL injection in /pages/proxy/php.php and /pages/proxy/add.php can be exploited via specially crafted input, allowing an attacker to obtain information from a database. The vulnerability can only be triggered by an authorized user.
EPSS
Процентиль: 37%
0.00162
Низкий
5.4 Medium
CVSS3
5.5 Medium
CVSS2
Дефекты
CWE-89