Lucene search
PRIOn knowledge basePRION:CVE-2024-0941HistoryJan 26, 2024 - 7:15 p.m.
Sql injection
2024-01-2619:15:00
PRIOn knowledge base
www.prio-n.com
5
sql injection
novel-plus 4.3.0-rc1
critical
file processing
argument manipulation
public disclosure
vdb-252185
vendor non-response
A vulnerability was found in Novel-Plus 4.3.0-RC1 and classified as critical. This issue affects some unknown processing of the file /novel/bookComment/list. The manipulation of the argument sort leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-252185 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
| CPE | Name | Operator | Version |
|---|---|---|---|
| novel-plus | eq | 4.3.0 rc1 |
Related
cve
cve
CVE-2024-0941
2024-01-26 19:15:08
nvd
nvd
CVE-2024-0941
2024-01-26 19:15:08
osv
osv
CVE-2024-0941
2024-01-26 19:15:08
cvelist
cvelist
CVE-2024-0941 Novel-Plus list sql injection
2024-01-26 18:31:05