PT-2026-71511
CVE-2026-28142
·
تاريخ النشر
2026-08-12
·
تاريخ التحديث
2026-10-23
الوصف من
CVSS 3.1
9.3
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions
Web Directory Free versions prior to 1.7.14
Description
An unauthenticated SQL Injection exists due to insufficient escaping of user-supplied parameters and a lack of proper preparation of SQL queries. This allows attackers to append additional SQL queries to existing ones to extract sensitive information from the database.
Recommendations
Update Web Directory Free to a version newer than 1.7.13.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾