Lucene search
China National Vulnerability DatabaseCNVD-2023-66425HistoryAug 12, 2023 - 12:00 a.m.
ScienceLogic SL1 SQL Injection Vulnerability (CNVD-2023-66425)
2023-08-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
sciencelogic inc. vulnerability multidirectional data cnvd-2023-66425 sql injection database cybersecurity
EPSS
0.001
Percentile
31.7%
ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL statements in the ticket watchers email feature, and can be exploited by an attacker to execute illegal SQL commands to steal sensitive database data.
Related
cvelist
cvelist
CVE-2022-48594
2023-08-09 18:18:03
nvd
nvd
CVE-2022-48594
2023-08-09 19:15:13
prion
prion
Sql injection
2023-08-09 19:15:00
cve
cve
CVE-2022-48594
2023-08-09 19:15:13