Sql injection

2023-11-0500:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

novel-plus

remote attacker

arbitrary code

crafted script

common log list

8.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.9%

JSON

SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /common/log/list.

CPENameOperatorVersion
novel-pluseq4.2.0

CPE	Name	Operator	Version
	novel-plus	eq	4.2.0

References

github.com/JunFengDeng/Cve-List/blob/main/novel-plus/20231027/vuln/readme.md