PT-2023-30691 · Unknown · Simple Crud Functionality
CVE-2023-48078
·
Publicado
2023-11-16
·
Atualizado
2024-08-14
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Simple CRUD Functionality version 1.0
Description
The issue allows attackers to run arbitrary SQL commands via the
title parameter in the "add.php" file. This can lead to unauthorized access and manipulation of database content.Recommendations
For Simple CRUD Functionality version 1.0, avoid using the
title parameter in the affected API endpoint until the issue is resolved. As a temporary workaround, consider validating and sanitizing all user input to prevent malicious SQL commands.Exploit
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Simple Crud Functionality