जमा करें #372007: LimeSurvey 6.5.14-240624 SQL Injectionजानकारी

शीर्षकLimeSurvey 6.5.14-240624 SQL Injection
विवरणA critical SQL injection vulnerability has been identified in LimeSurvey version 6.5.14-240624. This vulnerability exists in the actionUpdateSurveyLocaleSettingsGeneralSettings() function due to insufficient filtering of the language parameter. An attacker can exploit this vulnerability to execute arbitrary SQL commands on the database.
स्रोत⚠️ https://github.com/Hebing123/cve/issues/55
उपयोगकर्ता
 jiashenghe (UID 39445)
सबमिशन10/07/2024 05:45 AM (2 साल पहले)
संयम20/07/2024 08:04 AM (10 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि271988 [LimeSurvey 6.5.14-240624 Survey General Settings updatesurveylocalesettings_generalsettings actionUpdateSurveyLocaleSettingsGeneralSettings language SQL इंजेक्शन]
अंक19

Do you want to use VulDB in your project?

Use the official API to access entries easily!