Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 3:20 a.m.5 views

CVE-2023-2420

A vulnerability was found in MLECMS 3.0. It has been rated as critical. This issue affects the function geturl in the library /upload/inc/lib/admin of the file upload\inc\include\common.func.php. The manipulation of the argument $SERVER'REQUESTURI' leads to sql injection. The attack may be...

9.8CVSS7.4AI score0.00291EPSS
Exploits1References1
NVD
NVD
added 2023/04/29 2:15 a.m.12 views

CVE-2023-2420

A vulnerability was found in MLECMS 3.0. It has been rated as critical. This issue affects the function geturl in the library /upload/inc/lib/admin of the file upload\inc\include\common.func.php. The manipulation of the argument $SERVER'REQUESTURI' leads to sql injection. The attack may be...

9.8CVSS7.4AI score0.00291EPSS
Exploits1References3
Prion
Prion
added 2023/04/29 2:15 a.m.13 views

Sql injection

A vulnerability was found in MLECMS 3.0. It has been rated as critical. This issue affects the function geturl in the library /upload/inc/lib/admin of the file upload\inc\include\common.func.php. The manipulation of the argument $SERVER'REQUESTURI' leads to sql injection. The attack may be...

6.5CVSS9.7AI score0.00291EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/29 1:31 a.m.7 views

CVE-2023-2420 MLECMS common.func.php get_url sql injection

A vulnerability was found in MLECMS 3.0. It has been rated as critical. This issue affects the function geturl in the library /upload/inc/lib/admin of the file upload\inc\include\common.func.php. The manipulation of the argument $SERVER'REQUESTURI' leads to sql injection. The attack may be...

6.5CVSS9.8AI score0.00291EPSS
Exploits1References3
CVE
CVE
added 2023/04/29 1:31 a.m.69 views

CVE-2023-2420

MLECMS 3.0 contains a SQL injection in the get_url function of the /upload/inc/lib/admin module, triggered by manipulating $_SERVER['REQUEST_URI']. This CVE-2023-2420 entry states remote exploitability and public disclosure, rating the issue as CRITICAL per the description. Connected sources cons...

9.8CVSS8.3AI score0.00291EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/04/29 1:31 a.m.13 views

CVE-2023-2420 MLECMS common.func.php get_url sql injection

A vulnerability was found in MLECMS 3.0. It has been rated as critical. This issue affects the function geturl in the library /upload/inc/lib/admin of the file upload\inc\include\common.func.php. The manipulation of the argument $SERVER'REQUESTURI' leads to sql injection. The attack may be...

6.5CVSS10AI score0.00291EPSS
Exploits1References3
Rows per page
Query Builder