PT-2020-16094
CVE-2020-25475
·
تاريخ النشر
2020-11-24
·
تاريخ التحديث
2020-11-27
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SimplePHPscripts News Script PHP Pro version 2.3
Description
The issue is a SQL Injection via the
id parameter in an editNews action. This allows for potential exploitation of the software.Recommendations
For SimplePHPscripts News Script PHP Pro version 2.3, consider restricting access to the
editNews action or validating and sanitizing the id parameter to prevent SQL injection attacks. As a temporary workaround, avoid using the id parameter in the affected action until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾