Lucene search
+L

4 matches found

OSV
OSV
•added 2023/01/05 8:15 p.m.•36 views

CVE-2017-20163

A vulnerability has been found in Red Snapper NView and classified as critical. This vulnerability affects the function mutate of the file src/Session.php. The manipulation of the argument session leads to sql injection. The name of the patch is cbd255f55d476b29e5680f66f48c73ddb3d416a8. It is...

9.8CVSS7.7AI score
SaveExploits0References3
Prion
Prion
•added 2023/01/05 8:15 p.m.•22 views

Sql injection

A vulnerability has been found in Red Snapper NView and classified as critical. This vulnerability affects the function mutate of the file src/Session.php. The manipulation of the argument session leads to sql injection. The name of the patch is cbd255f55d476b29e5680f66f48c73ddb3d416a8. It is...

7.5CVSS9.8AI score0.00613EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2023/01/05 7:18 p.m.•59 views

CVE-2017-20163

Red Snapper NView is affected; the mutate function in src/Session.php is vulnerable to SQL injection via the session parameter. The patch cbd255f55d476b29e5680f66f48c73ddb3d416a8 is recommended as a fix. A temporary workaround from PT-2023-10615 suggests disabling mutate or restricting access to ...

9.8CVSS5.9AI score0.00613EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/05 12:00 a.m.•4 views

CVE-2017-20163: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Red Snapper NView and classified as critical. This vulnerability affects the function mutate of the file src/Session.php. The manipulation of the argument session leads to sql injection. The name of the patch is cbd255f55d476b29e5680f66f48c73ddb3d416a8. It is...

9.8CVSS5.3AI score0.00613EPSS
SaveExploits0References2
Rows per page
Query Builder