Wuro vulnerability wey an yi classify sey kura an gano shi a cikin gopeak MasterLab har 3.3.10. Gaskiya, sqlInject na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, app/ctrl/framework/Feature.php na cikin fayil, HTTP POST Request Handler na cikin sashi. Ngam manipulation of the argument pwd shi SQL Injection. CWE shidin ka a yi bayani matsala sai ya kai CWE-89. Gaskiya, laifi an fitar da shi 12/28/2023. Advisory ɗin ana rabawa don saukewa a note.zhaoj.in. Wannan rauni ana sayar da shi da suna CVE-2023-7144. Wuro ndiyam na local network ɗin sai a samu kafin wannan hari ya yi nasara. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a note.zhaoj.in. Kama 0-day, an ndiyam a wuro be $0-$5k. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

2 Goyarwa · 73 Datenpunkte