EUVD-2023-23826

Malicious code in bioql PyPI...

CVE-2023-1594

A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService of the file sys/menu/list. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

Sql injection

A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService of the file sys/menu/list. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

CVE-2023-1594 novel-plus list MenuService sql injection

A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService of the file sys/menu/list. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

CVE-2023-1594 novel-plus list MenuService sql injection

A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService of the file sys/menu/list. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

CVE-2023-1594 novel-plus list MenuService sql injection

A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService of the file sys/menu/list. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

CVE-2023-1594

CVE-2023-1594 affects novel-plus 3.6.2, specifically the MenuService in sys/menu/list. The root cause is improper handling of the sort argument, enabling SQL injection. Exploitation is possible remotely, and public exploit information exists. Several sources (NVD, Red Hat, CNNVD, OSV, etc.) concu...

CVE-2023-1594: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService of the file sys/menu/list. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...