| Titolo | 201206030 novel-plus v4.3.0-RC1 SQL inject |
|---|
| Descrizione | The /novel/bookComment/list interface of the novel-admin subsystem in the novel-plus system has SQL injection vulnerability.
https://github.com/red0-ha1yu/warehouse/blob/main/novel-plus_sqlinject2.md |
|---|
| Fonte | ⚠️ https://github.com/red0-ha1yu/warehouse/blob/main/novel-plus_sqlinject2.md |
|---|
| Utente | red0_ha1yu (UID 61457) |
|---|
| Sottomissione | 18/01/2024 04:05 (3 anni fa) |
|---|
| Moderazione | 26/01/2024 12:19 (8 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 252185 [Novel-Plus 4.3.0-RC1 /novel/bookComment/list sort iniezione SQL] |
|---|
| Punti | 17 |
|---|