Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 1:52 a.m.•18 views

CVE-2023-2040

A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /news/list?limit=10=0ℴ=desc. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

8.8CVSS7.2AI score0.00747EPSS
SaveExploits1References1
NVD
NVD
•added 2023/04/14 9:15 a.m.•30 views

CVE-2023-2040

A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /news/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

8.8CVSS7.3AI score0.00747EPSS
SaveExploits1References3
Prion
Prion
•added 2023/04/14 9:15 a.m.•25 views

Sql injection

A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /news/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

6.5CVSS8.9AI score0.00747EPSS
SaveExploits1References3Affected Software1
osv_cve
osv_cve
•added 2023/04/14 8:31 a.m.•27 views

CVE-2023-2040 novel-plus sql injection

A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /news/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

6.3CVSS6.5AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2023/04/14 8:31 a.m.•41 views

CVE-2023-2040 novel-plus sql injection

A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /news/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

6.5CVSS9.2AI score0.00747EPSS
SaveExploits1References3
Rows per page
Query Builder