Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-29788
HistoryApr 19, 2023 - 12:00 a.m.

Online Thesis Archiving System sql Injection Vulnerability (CNVD-2023-29788)

2023-04-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
29
thesis archiving system
sql injection
vulnerability
data theft
cnvd-2023-29788

0.002 Low

EPSS

Percentile

53.2%

Online Thesis Archiving System is an online thesis archiving system. Online Thesis Archiving System version 1.0 has a sql injection vulnerability, which originates from the poor filtering of the id parameter in /admin/user/manage_user.php. An attacker can use this vulnerability to perform SQL injection and steal data, etc.

0.002 Low

EPSS

Percentile

53.2%

Related for CNVD-2023-29788