Lucene search
MitreCVELIST:CVE-2023-26813HistoryApr 28, 2023 - 12:00 a.m.
CVE-2023-26813
2023-04-2800:00:00
mitre
www.cve.org
sql injection
remote attackers
arbitrary commands
datadictionaryplugincontroller
tablename parameter
tableview.do
0.001 Low
EPSS
Percentile
51.0%
SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName parameter to /plugin/dataDictionary/tableView.do.
References
Related
prion
prion
Sql injection
2023-04-28 20:15:00
cve
cve
CVE-2023-26813
2023-04-28 20:15:13
CVE-2023-26812
2023-04-28 20:15:13
osv
osv
CVE-2023-26813
2023-04-28 20:15:13
nvd
nvd
CVE-2023-26813
2023-04-28 20:15:13
CVE-2023-26812
2023-04-28 20:15:13