PT-2019-13375
CVE-2019-13507
·
تاريخ النشر
2019-07-11
·
تاريخ التحديث
2019-07-14
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
hidea.com AZ Admin version 1.0
Description
The issue is related to SQL Injection in the news det.php file, specifically with the
cod parameter. This could potentially allow unauthorized access to database information.Recommendations
For version 1.0, consider restricting access to the news det.php file or validating and sanitizing the
cod parameter to prevent SQL Injection attacks. As a temporary workaround, avoid using the cod parameter in the news det.php file until a proper fix is applied. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾