Описание
WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database information and potentially access sensitive system data.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:webtareas_project:webtareas:2.4:-:*:*:*:*:*:*
EPSS
Процентиль: 23%
0.00077
Низкий
7.5 High
CVSS3
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 8.2
github
около 2 месяцев назад
WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database information and potentially access sensitive system data.
EPSS
Процентиль: 23%
0.00077
Низкий
7.5 High
CVSS3
Дефекты
CWE-89