ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2023-49625
9.8критическая

CVE-2023-49625

Описание

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partylist_edit_submit.php resource does not validate the characters received and they are sent unfiltered to the database.

Затрагиваемое ПО
Kashipara Billing software
CVSS
Балл9.8 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://fluidattacks.com/advisories/zimerman/https://www.kashipara.com/https://fluidattacks.com/advisories/zimerman/https://www.kashipara.com/