Lucene search
China National Vulnerability DatabaseCNVD-2023-66413HistoryAug 12, 2023 - 12:00 a.m.
ScienceLogic SL1 SQL Injection Vulnerability (CNVD-2023-66413)
2023-08-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
sciencelogic inc. application automation sql injection vulnerability exploitation data theft database
EPSS
0.001
Percentile
31.7%
ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL statements in the message viewer iframe function, and can be exploited by an attacker to execute illegal SQL commands to steal sensitive database data.
Related
nvd
nvd
CVE-2022-48603
2023-08-09 19:15:14
prion
prion
Sql injection
2023-08-09 19:15:00
cvelist
cvelist
CVE-2022-48603
2023-08-09 18:34:48
cve
cve
CVE-2022-48603
2023-08-09 19:15:14