Sql injection

2023-12-1409:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

sunnytoo sturls

vulnerability

escalation

privileges

sensitive information

nvd

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.3%

JSON

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods.

CPENameOperatorVersion
sturlslt1.1.13

CPE	Name	Operator	Version
	sturls	lt	1.1.13

References

security.friendsofpresta.org/modules/2023/12/07/sturls.html