2 matches found
CVE-2024-0941 Novel-Plus list sql injection
A vulnerability was found in Novel-Plus 4.3.0-RC1 and classified as critical. This issue affects some unknown processing of the file /novel/bookComment/list. The manipulation of the argument sort leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier...
5.5CVSS7.5AI score0.00677EPSS
SaveExploits1References3
CVE-2024-0941: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Novel-Plus 4.3.0-RC1 and classified as critical. This issue affects some unknown processing of the file /novel/bookComment/list. The manipulation of the argument sort leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier...
9.8CVSS5.5AI score0.00677EPSS
SaveExploits1References2
20