Lucene search
+L

3 matches found

CNNVD
CNNVD
added 2023/01/05 12:0 a.m.6 views

NView SQL注入漏洞

NView is a php class for natural view management. NView suffers from a SQL injection vulnerability that stems from a problem with the function mutate in the file src/Session.php, where manipulation of the parameter session can lead to sql injection...

9.8CVSS6.5AI score0.00613EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/01/05 12:0 a.m.8 views

PT-2023-10615 · Unknown · Red Snapper Nview

Name of the Vulnerable Software and Affected Versions: Red Snapper NView affected versions not specified Description: A critical vulnerability has been found in Red Snapper NView. This issue affects the mutate function of the file src/Session.php. The manipulation of the session argument leads to...

9.8CVSS6.6AI score0.00613EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/05/03 12:0 a.m.8 views

PT-2021-17969

Name of the Vulnerable Software and Affected Versions: Node.js mixme versions prior to 0.5.1 Description: The issue allows an attacker to add or alter properties of an object via proto through the mutate and merge functions. The polluted attribute will be directly assigned to every object in the...

9.1CVSS7.1AI score0.01827EPSS
SaveExploits0References15
Rows per page
Query Builder