CVE-2023-43983

Presto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability via the component disablejson.php...

Sql injection

Presto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability via the component disablejson.php...

CVE-2023-43983

Presto Changeo attributegrid up to version 2.0.3 contains a SQL injection vulnerability in the disable_json.php component. The issue, documented across multiple feeds (including Red Hat and CVE records), has a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no user interaction,...

CVE-2023-43981

Presto Changeo testsitecreator (up to version 1.1.1) contains a deserialization vulnerability in the delete_excluded_folder.php component. The issue is rooted in unsafe deserialization within this PHP component, enabling arbitrary code execution or data tampering as described in the CVE entry. Th...

CVE-2023-43981

Presto Changeo testsitecreator up to 1.1.1 was discovered to contain a deserialization vulnerability via the component deleteexcludedfolder.php...

CVE-2023-43983

Presto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability via the component disablejson.php...

PT-2023-29058 · Presto Changeo · Presto Changeo Attributegrid

Name of the Vulnerable Software and Affected Versions: Presto Changeo attributegrid versions up to 2.0.3 Description: The issue is related to a SQL injection vulnerability via the component disable json.php. This vulnerability was discovered in Presto Changeo attributegrid. Recommendations: For...

CVE-2023-43981

Presto Changeo testsitecreator up to 1.1.1 was discovered to contain a deserialization vulnerability via the component deleteexcludedfolder.php...

CVE-2023-43983

Presto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability via the component disablejson.php...

GHSA-86Q5-QCJC-7PV4 Presto JDBC Server-Side Request Forgery by nextUri

Summary Presto JDBC is vulnerable to Server-Side Request Forgery SSRF when connecting a remote Presto server. An attacker can modify the nextUri parameter to internal server in response content that Presto JDBC client will request next and view sensitive information from highly sensitive internal...

GHSA-XM7X-F3W2-4HJM Presto JDBC Server-Side Request Forgery by redirect

Summary Presto JDBC is vulnerable to Server-Side Request Forgery SSRF when connecting a remote Presto server. An attacker can construct a redirect response that Presto JDBC client will follow and view sensitive information from highly sensitive internal servers or perform a local port scan. Detai...

PT-2023-33073 · Okhttp +1 · Okhttp +1

Name of the Vulnerable Software and Affected Versions: Presto JDBC affected versions not specified Description: Presto JDBC is vulnerable to Server-Side Request Forgery SSRF when connecting to a remote Presto server. An attacker can construct a redirect response that the Presto JDBC client will...

PT-2023-32996 · Unknown · Presto Jdbc

Name of the Vulnerable Software and Affected Versions: Presto JDBC affected versions not specified Description: The issue allows for Server-Side Request Forgery SSRF when connecting to a remote Presto server. An attacker can modify the nextUri parameter to point to an internal server, causing the...

CVE-2023-43980

Presto Changeo testsitecreator up to v1.1.1 was discovered to contain a SQL injection vulnerability via the component disablejson.php...

CVE-2023-43980

Presto Changeo testsitecreator up to v1.1.1 was discovered to contain a SQL injection vulnerability via the component disablejson.php...

CVE-2023-43980

Presto Changeo testsitecreator up to v1.1.1 was discovered to contain a SQL injection vulnerability via the component disablejson.php...

Sql injection

Presto Changeo testsitecreator up to v1.1.1 was discovered to contain a SQL injection vulnerability via the component disablejson.php...

CVE-2023-43980

Presto Changeo testsitecreator up to v1.1.1 was discovered to contain a SQL injection vulnerability via the component disablejson.php...

CVE-2023-43980

CVE-2023-43980 describes a SQL injection vulnerability in the Presto Changeo testsitecreator up to version 1.1.1, caused by the component disable_json.php . The connected sources confirm the affected software and the vulnerable component, but do not provide details on exploit status, attack vecto...

PT-2023-29055 · Presto Changeo · Testsitecreator

Name of the Vulnerable Software and Affected Versions: Presto Changeo testsitecreator versions up to 1.1.1 Description: The issue is related to a SQL injection vulnerability. This vulnerability is present in the component disable json.php. Recommendations: For Presto Changeo testsitecreator...