3 matches found
CVE-2023-31433
creationtimestamp| type| source ---|---|--- 2023-05-03 00:30:35+00:00| seen| https://t.me/cibsecurity/63184 2026-07-29 12:00:34+00:00| seen| https://t.me/CVEhub/12034 2026-07-30 00:01:00+00:00| seen| https://t.me/CVEhub/12034 2026-07-31 02:00:04+00:00| published-proof-of-concept|...
CVE-2023-31433
A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the welche parameter...
CVE-2023-31433
CVE-2023-31433: A SQL injection in evasys Logbuch allows an authenticated attacker to execute arbitrary SQL via the welche parameter. Affected: evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401. Root cause is unsafely constructed SQL statements in the Logbuch component. Impact: high conf...