pouetnet pouet 2.0 howmany sql injection

EntryDiffjsonxmlCTI

A vulnerability, which was classified as critical, was found in pouetnet pouet 2.0. This affects an unknown part. The manipulation of the argument howmany leads to sql injection. The CWE definition for the vulnerability is CWE-89. The weakness was released 01/08/2023 as 11d615931352066fb2f6dcb07428277c2cd99baf. The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2020-36648. The attack needs to be initiated within the local network. Technical details are available. There is no exploit available. The price for an exploit might be around USD $0-$5k at the moment. MITRE ATT&CK project uses the attack technique T1505 for this issue. It is declared as not defined. We expect the 0-day to have been worth approximately $0-$5k. The identifier of the patch is 11d615931352066fb2f6dcb07428277c2cd99baf. The bugfix is ready for download at github.com. It is recommended to apply a patch to fix this issue. A possible mitigation has been published even before and not after the disclosure of the vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

1	47

Field

vulnerability_cvss3_meta_tempscore	2
vulnerability_cvss3_meta_basescore	2
vulnerability_cvss3_cna_basescore	1
vulnerability_cvss3_nvd_basescore	1
vulnerability_cvss2_nvd_basescore	1

Commit Conf

90%	35
70%	25
50%	12

Approve Conf

90%	35
70%	25
80%	12

ID	Commited	User	Field	Change	Remarks	Accepted	Status	C
13611636	01/30/2023	VulD...	cvss3_cna_basescore	5.5	see CVSS documentation	01/30/2023	accepted	90
13611635	01/30/2023	VulD...	cvss3_nvd_basescore	9.8	nist.gov	01/30/2023	accepted	90
13611634	01/30/2023	VulD...	cvss2_nvd_basescore	5.2	nist.gov	01/30/2023	accepted	90
13611633	01/30/2023	VulD...	cvss3_meta_tempscore	6.9	see CVSS documentation	01/30/2023	accepted	90
13611632	01/30/2023	VulD...	cvss3_meta_basescore	6.9	see CVSS documentation	01/30/2023	accepted	90
13611631	01/30/2023	VulD...	cve_cna	VulDB	nvd.nist.gov	01/30/2023	accepted	70
13611630	01/30/2023	VulD...	cvss3_cna_a	L	nvd.nist.gov	01/30/2023	accepted	70
13611629	01/30/2023	VulD...	cvss3_cna_i	L	nvd.nist.gov	01/30/2023	accepted	70
13611628	01/30/2023	VulD...	cvss3_cna_c	L	nvd.nist.gov	01/30/2023	accepted	70
13611627	01/30/2023	VulD...	cvss3_cna_s	U	nvd.nist.gov	01/30/2023	accepted	70
13611626	01/30/2023	VulD...	cvss3_cna_ui	N	nvd.nist.gov	01/30/2023	accepted	70
13611625	01/30/2023	VulD...	cvss3_cna_pr	L	nvd.nist.gov	01/30/2023	accepted	70
13611624	01/30/2023	VulD...	cvss3_cna_ac	L	nvd.nist.gov	01/30/2023	accepted	70
13611623	01/30/2023	VulD...	cvss3_cna_av	A	nvd.nist.gov	01/30/2023	accepted	70
13611622	01/30/2023	VulD...	cvss2_nvd_ai	P	nvd.nist.gov	01/30/2023	accepted	70
13611621	01/30/2023	VulD...	cvss2_nvd_ii	P	nvd.nist.gov	01/30/2023	accepted	70
13611620	01/30/2023	VulD...	cvss2_nvd_ci	P	nvd.nist.gov	01/30/2023	accepted	70
13611619	01/30/2023	VulD...	cvss2_nvd_au	S	nvd.nist.gov	01/30/2023	accepted	70
13611618	01/30/2023	VulD...	cvss2_nvd_ac	L	nvd.nist.gov	01/30/2023	accepted	70
13611617	01/30/2023	VulD...	cvss2_nvd_av	A	nvd.nist.gov	01/30/2023	accepted	70

52 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 52 results.

◂ Previous Overview Next ▸

Might our Artificial Intelligence support you?

Check our Alexa App!