Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4407
HistoryAug 18, 2023 - 1:15 p.m.

Sql injection

2023-08-1813:15:00
PRIOn knowledge base
www.prio-n.com
3
vulnerability
critical
codecanyon credit lite
sql injection
post request handler
remote attack
nvd
account statement
date manipulation

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.0%

A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an unknown functionality of the file /portal/reports/account_statement of the component POST Request Handler. The manipulation of the argument date1/date2 leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-237511.

CPENameOperatorVersion
credit_liteeq1.5.4

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.0%

Related for PRION:CVE-2023-4407