CVE-2023-31433

A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the welche parameter...

Sql injection

A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the welche parameter...

CVE-2023-31433

A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the welche parameter...

PT-2023-23322

Name of the Vulnerable Software and Affected Versions evasys versions prior to 8.2 Build 2286 evasys versions 9.x prior to 9.0 Build 2401 Description A SQL injection issue in Logbuch in evasys allows authenticated attackers to execute SQL statements via the welche parameter. Recommendations For...

CVE-2023-31433: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the welche parameter...

CVE-2023-31433

CVE-2023-31433: A SQL injection in evasys Logbuch allows an authenticated attacker to execute arbitrary SQL via the welche parameter. Affected: evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401. Root cause is unsafely constructed SQL statements in the Logbuch component. Impact: high conf...