CVE-2023-31433

A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the welche parameter...

Sql injection

A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the welche parameter...

CVE-2023-31433

CVE-2023-31433: A SQL injection in evasys Logbuch allows an authenticated attacker to execute arbitrary SQL via the welche parameter. Affected: evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401. Root cause is unsafely constructed SQL statements in the Logbuch component. Impact: high conf...

CVE-2023-31433

A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the welche parameter...