Lucene search
+L

1 matches found

Huntr
Huntr
•added 2023/06/29 8:45 a.m.•19 views

SQL injection in searchArticles function

Description The searchArticles function in the KB module makes a call to the getSimpleResultSet function, with the perpage parameter taken from the user without sanitizing before entering the query, leading to the attacker being able to manipulate the query. Proof of Concept GET...

7.5CVSS6.8AI score0.00922EPSS
SaveExploits1
Rows per page
Query Builder