Non évaluée
Newsbull Haber Script 1.0.0 contains multiple SQL injection vulnerabilities in the search parameter that allow authenticated attackers to extract data...
CVE-2019-25699
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Newsbull Haber Script 1.0.0 contains multiple SQL injection vulnerabilities in the search parameter that allow authenticated attackers to extract database information through time-based, blind, and boolean-based injection techniques. Attackers can inject malicious SQL code through the search parameter in endpoints like /admin/comment/records, /admin/category/records, /admin/news/records, and /admin/menu/childs to manipulate database queries and retrieve sensitive data.
Références
- advisory vulncheck.com
- package github.com
- report exploit-db.com
- web newsbull.org