Lucene search
PRIOn knowledge basePRION:CVE-2023-1594HistoryMar 23, 2023 - 10:15 a.m.
Sql injection
2023-03-2310:15:00
PRIOn knowledge base
www.prio-n.com
3
vulnerability
novel-plus
menuservice
sql injection
remote attack
sort manipulation
public exploit
vdb-223662
A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService of the file sys/menu/list. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223662 is the identifier assigned to this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| novel-plus | eq | 3.6.2 |
Related
nvd
nvd
CVE-2023-1594
2023-03-23 10:15:12
cve
cve
CVE-2023-1594
2023-03-23 10:15:12
cvelist
cvelist
CVE-2023-1594 novel-plus list MenuService sql injection
2023-03-23 10:00:06
osv
osv
CVE-2023-1594
2023-03-23 10:15:12