Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 3:57 a.m.7 views

CVE-2023-46348

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods...

9.8CVSS7.3AI score0.00369EPSS
Exploits0
OSV
OSV
added 2023/12/14 9:15 a.m.2 views

CVE-2023-46348

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods...

9.8CVSS5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/12/14 9:15 a.m.2 views

CVE-2023-46348

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods...

9.8CVSS5.9AI score0.00369EPSS
Exploits0References2
Prion
Prion
added 2023/12/14 9:15 a.m.11 views

Sql injection

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods...

7.5CVSS7.5AI score0.00369EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/12/14 12:0 a.m.26 views

CVE-2023-46348

SunnyToo sturls is affected by an SQL injection in versions prior to 1.1.13. The vulnerability enables privilege escalation and disclosure of sensitive data via the StUrls::hookActionDispatcher and StUrls::getInstanceId methods. Affected component/functionality includes these two methods in the S...

9.8CVSS9.4AI score0.00369EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/14 12:0 a.m.3 views

PT-2023-29969 · Unknown · Sunnytoo Sturls

Name of the Vulnerable Software and Affected Versions: SunnyToo sturls versions prior to 1.1.13 Description: The issue allows attackers to escalate privileges and obtain sensitive information. This is achieved via the StUrls::hookActionDispatcher and StUrls::getInstanceId methods. Recommendations...

9.8CVSS9.5AI score0.00369EPSS
Exploits0References5
Cvelist
Cvelist
added 2023/12/14 12:0 a.m.15 views

CVE-2023-46348

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods...

9.8AI score0.00369EPSS
Exploits0References1
Rows per page
Query Builder