Lucene search

PRIOn knowledge basePRION:CVE-2023-26813

HistoryApr 28, 2023 - 8:15 p.m.

Sql injection

2023-04-2820:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

vulnerability

wangmarket cms

remote attackers

arbitrary sql commands

tablename parameter

datadictionary plugin

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.0%

JSON

SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName parameter to /plugin/dataDictionary/tableView.do.

CPENameOperatorVersion
wangmarket_cmseq4.10

CPE	Name	Operator	Version
	wangmarket_cms	eq	4.10

References

github.com/xnx3/wangmarket/issues/7