Lucene search

K
cvelistMitreCVELIST:CVE-2024-24013
HistoryFeb 06, 2024 - 12:00 a.m.

CVE-2024-24013

2024-02-0600:00:00
mitre
www.cve.org
1
sql injection
novel-plus
security vulnerability
crafted parameters
/novel/pay/list

0.001 Low

EPSS

Percentile

33.0%

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to perform SQL injection via /novel/pay/list

0.001 Low

EPSS

Percentile

33.0%

Related for CVELIST:CVE-2024-24013