Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-25076
HistoryJan 16, 2023 - 12:15 p.m.

Sql injection

2023-01-1612:15:00
PRIOn knowledge base
www.prio-n.com
7
sql injection
events extension
bigtree
critical
patch 11169e48ab1249109485fdb1e0c9fca3d25ba01d
vdb-218395

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

A vulnerability classified as critical was found in Events Extension on BigTree. Affected by this vulnerability is the function getRandomFeaturedEventByDate/getUpcomingFeaturedEventsInCategoriesWithSubcategories/recacheEvent/searchResults of the file classes/events.php. The manipulation leads to sql injection. The patch is named 11169e48ab1249109485fdb1e0c9fca3d25ba01d. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218395.

CPENameOperatorVersion
eventseq< 2018319

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

Related for PRION:CVE-2018-25076