CVE-2023-40954

A SQL injection vulnerability in Grzegorz Marczynski Dynamic Progress Bar aka webprogress v. 11.0 through 11.0.2, v12.0 through v12.0.2, v.13.0 through v13.0.2, v.14.0 through v14.0.2.1, v.15.0 through v15.0.2, and v16.0 through v16.0.2.1 allows a remote attacker to gain privileges via the recenc...

CVE-2023-40954

CVE-2023-40954 is a SQL injection vulnerability in Grzegorz Marczynski Dynamic Progress Bar (web_progress) affecting versions 11.0–11.0.2, 12.0–12.0.2, 13.0–13.0.2, 14.0–14.0.2.1, 15.0–15.0.2, and 16.0–16.0.2.1. The issue allows remote attackers to gain privileges via the recency parameter in mod...