Lucene search
PRIOn knowledge basePRION:CVE-2023-33180HistoryMay 30, 2023 - 9:15 p.m.
Sql injection
2023-05-3021:15:00
PRIOn knowledge base
www.prio-n.com
3
xibo cms
sql injection
api route
vulnerability
database exfiltration
bounds parameter
upgrade
nvd
Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.2 in the /display/map API route inside the CMS. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values in to the bounds parameter. Users should upgrade to version 3.3.5, which fixes this issue. There are no known workarounds aside from upgrading.
Related
osv
osv
CVE-2023-33180
2023-05-30 21:15:09
cve
cve
CVE-2023-33180
2023-05-30 21:15:09
nvd
nvd
CVE-2023-33180
2023-05-30 21:15:09
cvelist
cvelist