PT-2026-81251 · Readabler · Readabler
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Readabler versions prior to 2.0.18
Description
An issue exists where unauthenticated attackers can perform SQL Injection, a technique used to interfere with the queries that an application makes to its database. This occurs due to insufficient escaping of user-supplied parameters and a lack of proper preparation of the SQL query, allowing attackers to append additional queries to extract sensitive information from the database.
Recommendations
Update to version 2.0.18 or later.
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Readabler