EUVD-2023-44321

Malicious code in bioql PyPI...

Sql injection

A vulnerability, which was classified as critical, was found in Nesote Inout Blockchain EasyPayments 1.0. Affected is an unknown function of the file /index.php/payment/getcoinaddress of the component POST Parameter Handler. The manipulation of the argument coinid leads to sql injection. It is...

CVE-2023-3682

CVE-2023-3682 affects Nesote Inout Blockchain EasyPayments 1.0; the POST endpoint /index.php/payment/getcoinaddress (coinid) is vulnerable to SQL injection. Exploitation is remote; no authentication or user interaction required per sources. Root cause is an unknown function in the POST Parameter ...