CVE-2023-38899

SQL injection vulnerability in berkaygediz OBlog v.1.0 allows a local attacker to escalate privileges via the securefilepriv component...

CVE-2023-38899

CVE-2023-38899 describes a SQL injection vulnerability in the berkaygediz O_Blog v1.0 that allows a local attacker to escalate privileges via the secure_file_priv component. The issue is triggered through the vulnerable SQL pathway and has a local attack vector with low attack complexity and no u...