62 matches found
CVE-2023-51805
SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file...
8.1CVSS7.6AI score
SaveExploits0References3
CVE-2023-51805: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file...
6.5CVSS6.7AI score0.00617EPSS
SaveExploits1References3
20