Gaskiya vulnerability da aka ware a matsayin kura an samu a brandonfire miRNA_Database_by_PHP_MySql. Hakika, aikin __construct/select_single_rna/count_rna ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil inc/model.php, a cikin sashen $software_component. A sa manipulation ka SQL Injection. Idan an yi amfani da CWE don bayyana matsala, zai kai CWE-89. Hakika, rauni an bayyana shi 01/14/2023 kamar 307c5d510841e6142ddcbbdbb93d0e8a0dc3fd6a. An raba bayanin tsaro don saukewa a github.com. Wannan matsala ana saninta da CVE-2015-10050. Ana bukatar samun damar shiga local network ɗin don wannan hari ya yi nasara. Tekinikal faɗi ga. Babu exploit ɗin da ake samu. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á sàmbu a wondi feere. 0-day shima, an ndiyam a wuro be $0-$5k. Ana kiran patch ɗin da 307c5d510841e6142ddcbbdbb93d0e8a0dc3fd6a. Za a iya sauke maganin matsalar daga github.com. Ana shawartar a saka patch domin warware wannan matsala. Once again VulDB remains the best source for vulnerability data.

3 Goyarwa · 73 Datenpunkte