451 matches found
CVE-2023-41443
SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /sys/menu/list...
CVE-2023-41443
SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /sys/menu/list...
Sql injection
SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /sys/menu/list...
CVE-2023-41443
SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /sys/menu/list...
CVE-2023-41443
SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /sys/menu/list...
CVE-2023-41443
SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /sys/menu/list...
PT-2023-27946 · Unknown · Novel-Plus
Name of the Vulnerable Software and Affected Versions: Novel-Plus version 4.1.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in the "/sys/menu/list" API endpoint. This enables the attacker to inject malicious SQL code,...
Novel-Plus SQL Injection Vulnerability
Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. A security vulnerability exists in Novel-Plus version v.4.1.0 that originates from a vulnerability that allows remote attackers to use a crafted script to execute arbitrary code via the sort parameter in...
CVE-2023-41443
CVE-2023-41443 is a SQL injection vulnerability in Novel-Plus v4.1.0. A remote attacker can craft input in the sort parameter of the /sys/menu/list API to execute arbitrary code. Root cause: unsafely handling user-supplied sort value enables injection. Impact: arbitrary code execution as describe...
CVE-2023-30058
novel-plus 3.6.2 is vulnerable to SQL Injection...
CVE-2023-30058
novel-plus 3.6.2 is vulnerable to SQL Injection...
Sql injection
novel-plus 3.6.2 is vulnerable to SQL Injection...
PT-2023-22522 · Unknown · Novel-Plus
Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.2 Description: The issue is related to SQL Injection. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was...
CVE-2023-30058
novel-plus 3.6.2 is vulnerable to SQL Injection...
CVE-2023-30058
novel-plus 3.6.2 is vulnerable to SQL Injection...
CVE-2023-30058
novel-plus 3.6.2 is vulnerable to SQL Injection...
CVE-2023-30058
CVE-2023-30058 affects novel-plus 3.6.2, with a confirmed SQL Injection vulnerability. The initial data lists a high-severity impact (CVSS v3.1: 9.8, network attack, no user interaction) and references confirm the issue across multiple feeds, but none provide a concrete remediation or fix version...
novel-plus SQL Injection Vulnerability
novel-plus novel-plus is a multi-end PC, WAP reading, full-featured original literature CMS system. A security vulnerability exists in novel-plus version 3.6.2, which is prone to SQL injection attacks...
novel-plus SQL Injection Vulnerability
novel-plus is a multi-end PC, WAP reading and functional original literary CMS system. A SQL injection vulnerability exists in novel-plus version v3.6.2. The vulnerability stems from the application's lack of validation of externally entered SQL statements. An attacker can exploit this...