Lucene search
PRIOn knowledge basePRION:CVE-2023-2040HistoryApr 14, 2023 - 9:15 a.m.
Sql injection
2023-04-1409:15:00
PRIOn knowledge base
www.prio-n.com
2
vulnerability
novel-plus
remote attack
exploit
disclosure
vdb-225918
A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /news/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225918 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
| CPE | Name | Operator | Version |
|---|---|---|---|
| novel-plus | eq | 3.6.2 |
Related
osv
osv
CVE-2023-2040
2023-04-14 09:15:07
cvelist
cvelist
CVE-2023-2040 novel-plus sql injection
2023-04-14 08:31:03
cve
cve
CVE-2023-2040
2023-04-14 09:15:07
nvd
nvd
CVE-2023-2040
2023-04-14 09:15:07