CVE-2023-7146

A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjectDelete of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument phone leads to sql injection...

CVE-2023-7145

A vulnerability classified as critical was found in gopeak MasterLab up to 3.3.10. This vulnerability affects the function sqlInject of the file app/ctrl/Framework.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to sql injection. The exploit has been...

Sql injection

A vulnerability classified as critical was found in gopeak MasterLab up to 3.3.10. This vulnerability affects the function sqlInject of the file app/ctrl/Framework.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to sql injection. The exploit has been...

Sql injection

A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjectDelete of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument phone leads to sql injection...

CVE-2023-7146 gopeak MasterLab HTTP POST Request Feature.php sqlInjectDelete sql injection

A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjectDelete of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument phone leads to sql injection...

CVE-2023-7146

CVE-2023-7146 affects gopeak MasterLab up to version 3.3.10, specifically the HTTP POST Request Handler’s function sqlInjectDelete in app/ctrl/framework/Feature.php. The vulnerability arises from manipulation of the phone argument, enabling SQL injection. Public exploitation of this issue has bee...

CVE-2023-7146 gopeak MasterLab HTTP POST Request Feature.php sqlInjectDelete sql injection

A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjectDelete of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument phone leads to sql injection...

CVE-2023-7145

gopeak MasterLab versions up to 3.3.10 contain a SQL injection in the HTTP POST Request Handler, specifically in the sqlInject function of app/ctrl/Framework.php where tampering the pwd parameter enables injection. Confirmed details show exploitation has been disclosed. Practical impact is high: ...

CVE-2023-7145 gopeak MasterLab HTTP POST Request Framework.php sqlInject sql injection

A vulnerability classified as critical was found in gopeak MasterLab up to 3.3.10. This vulnerability affects the function sqlInject of the file app/ctrl/Framework.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to sql injection. The exploit has been...

CVE-2023-7144

A vulnerability classified as critical has been found in gopeak MasterLab up to 3.3.10. This affects the function sqlInject of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to sql injection. The exploit has been...

CVE-2023-7144

A vulnerability classified as critical has been found in gopeak MasterLab up to 3.3.10. This affects the function sqlInject of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to sql injection. The exploit has been...

Sql injection

A vulnerability classified as critical has been found in gopeak MasterLab up to 3.3.10. This affects the function sqlInject of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to sql injection. The exploit has been...

CVE-2023-7144 gopeak MasterLab HTTP POST Request Feature.php sqlInject sql injection

A vulnerability classified as critical has been found in gopeak MasterLab up to 3.3.10. This affects the function sqlInject of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to sql injection. The exploit has been...

CVE-2023-7144

The CVE-2023-7144 entry concerns gopeak MasterLab versions up to 3.3.10, specifically the HTTP POST Request Handler’s component and the sqlInject function in app/ctrl/framework/Feature.php. The vulnerability arises from improper handling of the pwd argument, enabling SQL injection. Public exploit...

Sven gopeak masterlab SQL Injection Vulnerability

Sven gopeak masterlab is a Sven open source application. Provide simple and efficient , agile development based project management tools . Sven gopeak masterlab version 3.3.10 and earlier versions of the SQL injection vulnerability , the vulnerability stems from app/ctrl/Framework.php sqlInject...

Sven gopeak masterlab code issue vulnerability

Sven gopeak masterlab is a Sven open source application. Provides simple and efficient , agile development based project management tools . Sven gopeak masterlab version 3.3.10 and earlier versions of the code problematic vulnerability , the vulnerability stems from app/ctrl/User.php...

PT-2023-32914 · Unknown · Gopeak Masterlab

Name of the Vulnerable Software and Affected Versions: gopeak MasterLab versions up to 3.3.10 Description: A critical issue has been found in the function add/update of the file app/ctrl/admin/User.php, where the manipulation of the avatar argument leads to unrestricted upload. This issue can be...

Sven gopeak masterlab security breach

Sven gopeak masterlab is a Sven open source application. Provides simple and efficient , agile development based project management tools . Sven gopeak masterlab version 3.3.10 and earlier versions of a security vulnerability , the vulnerability stems from app/ctrl/framework/Feature.php sqlInject...

Sven gopeak masterlab SQL Injection Vulnerability

Sven gopeak masterlab is a Sven open source application. Provide simple and efficient , agile development based project management tools . Sven gopeak masterlab version 3.3.10 and earlier versions of the SQL injection vulnerability , the vulnerability stems from app/ctrl/framework/Feature.php...

Sven gopeak masterlab code issue vulnerability

Sven gopeak masterlab is a Sven open source application. Provides simple and efficient , agile development based project management tools . Sven gopeak masterlab version 3.3.10 and earlier versions of the code problematic vulnerability , the vulnerability stems from app/ctrl/admin/User.php...