Lucene search
PRIOn knowledge basePRION:CVE-2023-33179HistoryMay 30, 2023 - 9:15 p.m.
Sql injection
2023-05-3021:15:00
PRIOn knowledge base
www.prio-n.com
1
xibo cms
sql injection
vulnerability
version 3.2.0
version 3.3.5
namefilter function
logical operators
authenticated user
exfiltrate data
database
upgrade
nvd
Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.5 in the nameFilter function used throughout the CMS. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values for logical operators. Users should upgrade to version 3.3.5 which fixes this issue. There are no known workarounds aside from upgrading.
Related
cve
cve
CVE-2023-33179
2023-05-30 21:15:09
osv
osv
CVE-2023-33179
2023-05-30 21:15:09
cvelist
cvelist
nvd
nvd
CVE-2023-33179
2023-05-30 21:15:09