PT-2026-71577
CVE-2026-66472
·
تاريخ النشر
2026-08-10
·
تاريخ التحديث
2026-10-23
الوصف من
CVSS 3.1
9.3
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions
Everest Backup versions prior to 2.3.13
Description
An unauthenticated SQL Injection exists due to insufficient escaping of user-supplied parameters and a lack of proper preparation of SQL queries. This allows attackers to append additional SQL queries to existing ones to extract sensitive information from the database.
Recommendations
Update to a version newer than 2.3.12.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾