Lucene search
+L

5 matches found

NVD
NVD
•added 2024/03/21 4:15 a.m.•27 views

CVE-2023-48901

A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL commands via the parameter "id" within the getPhotosByCarId function call in details.php...

9.8CVSS8.4AI score0.01031EPSS
SaveExploits3References1
attackerkb
attackerkb
•added 2024/03/21 4:15 a.m.•9 views

CVE-2023-48901

A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL commands via the parameter "id" within the getPhotosByCarId function call in details.php...

9.8CVSS7.7AI score0.01031EPSS
SaveExploits3References2
Vulnrichment
Vulnrichment
•added 2024/03/21 12:00 a.m.•21 views

CVE-2023-48901

A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL commands via the parameter "id" within the getPhotosByCarId function call in details.php...

9.1AI score0.01031EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/21 12:00 a.m.•3 views

CVE-2023-48901: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL commands via the parameter "id" within the getPhotosByCarId function call in details.php...

9.8CVSS6.4AI score0.01031EPSS
SaveExploits3References2
OSV
OSV
•added 2024/03/21 12:00 a.m.•8 views

CVE-2023-48901

A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL commands via the parameter "id" within the getPhotosByCarId function call in details.php...

9.8CVSS10AI score
SaveExploits0References3
Rows per page
Query Builder