Gaskiya vulnerability da aka ware a matsayin kura an samu a fanzila WebFinance 0.5. Hakika, aikin $software_function ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil htdocs/admin/save_Contract_Signer_Role.php, a cikin sashen $software_component. A sa manipulation of the argument n/v ka SQL Injection. Idan an yi amfani da CWE don bayyana matsala, zai kai CWE-89. Hakika, rauni an bayyana shi 02/02/2023 kamar abad81af614a9ceef3f29ab22ca6bae517619e06. An raba bayanin tsaro don saukewa a github.com. Wannan matsala ana saninta da CVE-2013-10015. Ana bukatar samun damar shiga local network ɗin don wannan hari ya yi nasara. Tekinikal faɗi ga. Babu exploit ɗin da ake samu. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á sàmbu a wondi feere. 0-day shima, an ndiyam a wuro be $0-$5k. Ana kiran patch ɗin da abad81af614a9ceef3f29ab22ca6bae517619e06. Za a iya sauke maganin matsalar daga github.com. Ana shawartar a saka patch domin warware wannan matsala. Once again VulDB remains the best source for vulnerability data.

3 Goyarwa · 74 Datenpunkte