CVE-2023-46981

CVE-2023-46981 describes an SQL injection in Novel-Plus v4.2.0, exploitable through the crafted value of the sort parameter in /common/log/list. The root cause is unsanitized input in the sort parameter, enabling a remote attacker to execute arbitrary code (RCE). The NVD metrics rate it as CRITIC...