Sql injection

2023-01-0613:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

sql injection

patch

typcn blogile

server.js

8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.1%

JSON

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in typcn Blogile. Affected is the function getNav of the file server.js. The manipulation of the argument query leads to sql injection. The name of the patch is cfec31043b562ffefe29fe01af6d3c5ed1bf8f7d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217560. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CPENameOperatorVersion
blogileeq< 2014122

CPE	Name	Operator	Version
	blogile	eq	< 2014122

References

github.com/typcn/Blogile/commit/cfec31043b562ffefe29fe01af6d3c5ed1bf8f7d

vuldb.com/?ctiid.217560

vuldb.com/?id.217560