CVE-2023-38870

creationtimestamp| type| source ---|---|--- 2023-09-28 08:41:01+00:00| seen| https://t.me/cibsecurity/71177...

CVE-2023-38870

A SQL injection vulnerability exists in gugoan Economizzer commit 3730880 April 2023 and v.0.9-beta1. The cash book has a feature to list accomplishments by category, and the 'categoryid' parameter is vulnerable to SQL Injection...

CVE-2023-38870

CVE-2023-38870 affects gugoan Economizzer, specifically the cash book feature that lists accomplishments by category. The vulnerability is in the category_id parameter, enabling SQL injection due to unsanitized input in commit 3730880 (April 2023) and in version 0.9-beta1. The CVSS 3.1 vector (AV...