WeGIA has Unauthenticated Time-Based Blind SQL Injection in almox Parameter
Résumé
WeGIA has Unauthenticated Time-Based Blind SQL Injection in almox Parameter
Description d'origine
La description telle que publiée par la source (souvent en anglais).
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in version 3.3.3 the almox parameter of the /controle/getProdutosPorAlmox.php endpoint. This issue allows any unauthenticated attacker to inject arbitrary SQL queries, potentially leading to unauthorized data access or further exploitation depending on database configuration. Version 3.4.0 fixes the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov