Sql injection

2023-07-1616:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

bylancer quickorder 6.3.7

critical

sql injection

remote attack

nvd

vdb-234236

get parameter handler

vendor disclosure

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.3%

JSON

A vulnerability, which was classified as critical, has been found in Bylancer QuickOrder 6.3.7. Affected by this issue is some unknown functionality of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-234236. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CPENameOperatorVersion
quickordereq6.3.7

CPE	Name	Operator	Version
	quickorder	eq	6.3.7

References

vuldb.com/?ctiid.234236

vuldb.com/?id.234236