CVE-2023-48925

SQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to escalate privileges and obtain sensitive information via the component BaVideoTabSaveVideoModuleFrontController::run...

PT-2023-31010 · Unknown · Buy Addons Bavideotab

Name of the Vulnerable Software and Affected Versions: Buy Addons bavideotab versions prior to 1.0.6 Description: The issue allows attackers to escalate privileges and obtain sensitive information via the component BaVideoTabSaveVideoModuleFrontController::run. Recommendations: For versions prior...

CVE-2023-48925: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to escalate privileges and obtain sensitive information via the component BaVideoTabSaveVideoModuleFrontController::run...