Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 3:57 a.m.•19 views

CVE-2023-46348

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods...

9.8CVSS7.3AI score0.00849EPSS
SaveExploits0
OSV
OSV
•added 2023/12/14 9:15 a.m.•17 views

CVE-2023-46348

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods...

9.8CVSS5.8AI score0.00849EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/12/14 9:15 a.m.•13 views

CVE-2023-46348

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods...

9.8CVSS5.9AI score0.00849EPSS
SaveExploits0References2
Prion
Prion
•added 2023/12/14 9:15 a.m.•24 views

Sql injection

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods...

7.5CVSS7.5AI score0.00849EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/14 12:00 a.m.•6 views

CVE-2023-46348: Improper Neutralization of Special Elements used in an SQL Command

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods...

9.8CVSS8.2AI score0.00849EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/12/14 12:00 a.m.•33 views

CVE-2023-46348

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods...

9.8AI score0.00849EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/12/14 12:00 a.m.•18 views

PT-2023-29969 · Unknown · Sunnytoo Sturls

Name of the Vulnerable Software and Affected Versions: SunnyToo sturls versions prior to 1.1.13 Description: The issue allows attackers to escalate privileges and obtain sensitive information. This is achieved via the StUrls::hookActionDispatcher and StUrls::getInstanceId methods. Recommendations...

9.8CVSS9.5AI score0.00849EPSS
SaveExploits0References5
CVE
CVE
•added 2023/12/14 12:00 a.m.•48 views

CVE-2023-46348

SunnyToo sturls is affected by an SQL injection in versions prior to 1.1.13. The vulnerability enables privilege escalation and disclosure of sensitive data via the StUrls::hookActionDispatcher and StUrls::getInstanceId methods. Affected component/functionality includes these two methods in the S...

9.8CVSS9.4AI score0.00849EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder