Lucene search
+L

4 matches found

attackerkb
attackerkb
•added 2023/12/15 12:15 a.m.•8 views

CVE-2023-48049

A SQL injection vulnerability in Cybrosys Techno Solutions Website Blog Search aka websitesearchblog v. 13.0 through 13.0.1.0.1 allows a remote attacker to execute arbitrary code and to gain privileges via the name parameter in controllers/main.py component...

9.8CVSS6.3AI score0.01005EPSS
SaveExploits1References2
NVD
NVD
•added 2023/12/15 12:15 a.m.•30 views

CVE-2023-48049

A SQL injection vulnerability in Cybrosys Techno Solutions Website Blog Search aka websitesearchblog v. 13.0 through 13.0.1.0.1 allows a remote attacker to execute arbitrary code and to gain privileges via the name parameter in controllers/main.py component...

9.8CVSS0.01005EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/12/14 12:00 a.m.•19 views

PT-2023-30678 · Cybrosys Techno Solutions · Cybrosys Techno Solutions Website Blog Search

Name of the Vulnerable Software and Affected Versions: Cybrosys Techno Solutions Website Blog Search aka website search blog versions 13.0 through 13.0.1.0.1 Description: A SQL injection issue allows a remote attacker to execute arbitrary code and gain privileges via the name parameter in the...

9.8CVSS9.9AI score0.01005EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/14 12:00 a.m.•4 views

CVE-2023-48049: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in Cybrosys Techno Solutions Website Blog Search aka websitesearchblog v. 13.0 through 13.0.1.0.1 allows a remote attacker to execute arbitrary code and to gain privileges via the name parameter in controllers/main.py component...

9.8CVSS8.8AI score0.01005EPSS
SaveExploits1References2
Rows per page
Query Builder