2 matches found
Sql injection
DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component ConfiguratorAttachment::getAttachmentByToken...
7.5CVSS9.7AI score0.00518EPSS
SaveExploits0References2Affected Software1
CVE-2023-43986: Improper Neutralization of Special Elements used in an SQL Command
DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component ConfiguratorAttachment::getAttachmentByToken...
9.8CVSS8.1AI score0.00518EPSS
SaveExploits0References2
20