PT-2023-10099 · Unknown · Ttskch Paginationserviceprovider

CVE-2014-125029

·

Publicado

2023-01-07

·

Atualizado

2024-05-17

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ttskch PaginationServiceProvider versions up to 0.x
Description A critical vulnerability was found in the ttskch PaginationServiceProvider. The issue affects the file demo/index.php of the component demo. The manipulation of the sort/id argument leads to SQL injection.
Recommendations For versions up to 0.x, upgrade to version 1.0.0 to address this issue. As a temporary workaround, consider restricting the manipulation of the sort/id argument to minimize the risk of SQL injection.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2014-125029
GHSA-WW43-MCVH-35P4

Produtos afetados

Ttskch Paginationserviceprovider