CVE-2023-42283

Disclaimer For educational purpose only! Details Proof of concept for CVE-2023-42283. Tyk Gateway is vulnerable to SQL injection. Fixed in 5.0.7 version. The URL parameter ‘apiid’ of the "https:///api/errors/count/...?res=day&p=...&apiversion=...&apiid="is vulnerable to Blind SQL injection...

CVE-2023-42284

Disclaimer For educational purpose only! Details Proof of concept for CVE-2023-42284. Tyk Gateway is vulnerable to SQL injection. Fixed in 5.0.7 version. The URL parameter ‘apiversion’ of the "https:///api/errors/count/...?res=day&p=...&apiversion=&apiid=..."is vulnerable to Blind SQL injection...

EUVD-2021-10427

Malware in sbrugna...

EUVD-2023-46737

Malicious code in bioql PyPI...

EUVD-2023-46738

Malicious code in bioql PyPI...

CVE-2023-42283

Blind SQL injection in apiid parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

CVE-2023-42284

Blind SQL injection in apiversion parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

CVE-2023-42284

Blind SQL injection in apiversion parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

CVE-2023-42283

Blind SQL injection in apiid parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

CVE-2023-42283

Blind SQL injection in apiid parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

Sql injection

Blind SQL injection in apiversion parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

Sql injection

Blind SQL injection in apiid parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

CVE-2023-42283

Blind SQL injection in apiid parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

CVE-2023-42284

Blind SQL injection in apiversion parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

CVE-2023-42283

Blind SQL injection in apiid parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

PT-2023-7225 · Tyk · Tyk Gateway

Name of the Vulnerable Software and Affected Versions: Tyk Gateway version 5.0.3 Description: The issue concerns a blind SQL injection in the api id parameter, allowing an attacker to access and dump the database via a crafted SQL query. This is related to the lack of protection measures for the...

CVE-2023-42284

CVE-2023-42284 concerns Tyk Gateway 5.0.3. The vulnerability is a blind SQL injection in the API parameter api_version , enabling an attacker to access and dump the database via a crafted query. Reported impact is high (database exposure/compromise) with CVSS 3.1 base score 9.8 (CRITICAL) from NV...

CVE-2023-42283: Improper Neutralization of Special Elements used in an SQL Command

Blind SQL injection in apiid parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

CVE-2023-42284: Improper Neutralization of Special Elements used in an SQL Command

Blind SQL injection in apiversion parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

PT-2023-7385 · Tyk · Tyk Gateway

Name of the Vulnerable Software and Affected Versions: Tyk Gateway version 5.0.3 Description: The issue is related to a lack of protection against SQL query structure exploitation in the Tyk Gateway API implementation. This allows a remote attacker to execute arbitrary SQL queries. Specifically, ...