2 matches found
CVE-2023-46348
SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods...
9.8CVSS5.8AI score0.00849EPSS
SaveExploits0References1
CVE-2023-46348: Improper Neutralization of Special Elements used in an SQL Command
SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods...
9.8CVSS8.2AI score0.00849EPSS
SaveExploits0References2
20