EUVD-2023-48040

Malicious code in bioql PyPI...

Sql injection

TaxonWorks is a web-based workbench designed for taxonomists and biodiversity scientists. Prior to version 0.34.0, a SQL injection vulnerability was found in TaxonWorks that allows authenticated attackers to extract arbitrary data from the TaxonWorks database including the users table. This issue...

CVE-2023-43640 TaxonWorks SQL injection vulnerability

TaxonWorks is a web-based workbench designed for taxonomists and biodiversity scientists. Prior to version 0.34.0, a SQL injection vulnerability was found in TaxonWorks that allows authenticated attackers to extract arbitrary data from the TaxonWorks database including the users table. This issue...

CVE-2023-43640 TaxonWorks SQL injection vulnerability

TaxonWorks is a web-based workbench designed for taxonomists and biodiversity scientists. Prior to version 0.34.0, a SQL injection vulnerability was found in TaxonWorks that allows authenticated attackers to extract arbitrary data from the TaxonWorks database including the users table. This issue...

CVE-2023-43640

CVE-2023-43640 describes an SQL injection in TaxonWorks prior to version 0.34.0, reported to allow authenticated attackers to extract arbitrary data from the TaxonWorks database (including the users table), leading to information disclosure. The fixed version is 0.34.0. Connected sources corrobor...

PT-2023-28894 · Unknown · Taxonworks

Name of the Vulnerable Software and Affected Versions: TaxonWorks versions prior to 0.34.0 Description: A SQL injection issue was found in TaxonWorks, allowing authenticated attackers to extract arbitrary data from the database, including the users table, which may lead to information disclosure...

TaxonWorks SQL Injection Vulnerability

TaxonWorks is an open source web-based workbench for taxonomists and biodiversity scientists from Species File Group. A SQL injection vulnerability exists in TaxonWorks versions prior to 0.34.0, which originates from a vulnerability that could allow an authenticated attacker to extract arbitrary...