Lucene search

PRIOn knowledge basePRION:CVE-2019-25100

HistoryJan 08, 2023 - 11:15 a.m.

Sql injection

2023-01-0811:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

happyman twmap

pointdata2.php

upgrade

v2.9_v4.31

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.6%

JSON

A vulnerability was found in happyman twmap. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file twmap3/data/ajaxCRUD/pointdata2.php. The manipulation of the argument id leads to sql injection. Upgrading to version v2.9_v4.31 is able to address this issue. The identifier of the patch is babbec79b3fa4efb3bd581ea68af0528d11bba0c. It is recommended to upgrade the affected component. The identifier VDB-217645 was assigned to this vulnerability.

CPENameOperatorVersion
twmapeq< 2.91-4.31

CPE	Name	Operator	Version
	twmap	eq	< 2.91-4.31

References

github.com/happyman/twmap/commit/babbec79b3fa4efb3bd581ea68af0528d11bba0c

github.com/happyman/twmap/issues/42

github.com/happyman/twmap/releases/tag/v2.9_v4.31

vuldb.com/?ctiid.217645

vuldb.com/?id.217645