2 matches found
CVE-2025-0698 JoeyBling bootplus list sql injection
A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been classified as critical. Affected is an unknown function of the file /admin/sys/menu/list. The manipulation of the argument sort/order leads to sql injection. It is possible to launch the...
5.3CVSS5.7AI score
SaveExploits0References7
CVE-2025-0698: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been classified as critical. Affected is an unknown function of the file /admin/sys/menu/list. The manipulation of the argument sort/order leads to sql injection. It is possible to launch the...
8.8CVSS5.4AI score0.00423EPSS
SaveExploits0References1
20