VDB-218006 · CVE-2017-20168 · ID 23

jfm-so piWallet api.php key SQL Injection

Hakika vulnerability da aka rarraba a matsayin kura an gano a jfm-so piWallet. Tabbas, aikin $software_function ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil api.php, a cikin sashi $software_component. Wuro manipulation of the argument key ga SQL Injection. Amfani da CWE wajen bayyana matsala yana kaiwa CWE-89. Lalle, rauni an sanar da shi 01/11/2023 da 23. Ana samun bayanin tsaro don saukewa a github.com. Ana kiran wannan rauni da CVE-2017-20168. Wannan hari ba zai yi nasara ba sai an samu damar shiga local network. Bayani na fasaha ga. Babu wani exploit da ake da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á yí a wondi feere. 0-day ga, an ndiyam a wuro be $0-$5k. Patch ɗin an san shi da b420f8c4cbe7f06a34d1b05e90ee5cdfe0aa83bb. Za a iya sauke maganin matsalar daga github.com. Ya kamata a yi amfani da patch don magance wannan matsala. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Waktin goyi

Màdùmga

VulDB Mod Team	72

Furɗe

cvss3_meta_tempscore	2
cvss3_meta_basescore	2
cvss3_cna_basescore	1
cvss3_nvd_basescore	1
cvss2_nvd_basescore	1

Commit Conf

90%	34
70%	25
50%	13

Approve Conf

90%	34
70%	25
80%	13

72 Kari

ID	Sanda	Màdùmga	Furɗe	Gargajiya	Garga	Gargajiya	Jawan	C
13621253	02/01/2023	VulDB…	cvss3_cna_basescore	5.5	see CVSS documentation	02/01/2023	shingilam	90
13621252	02/01/2023	VulDB…	cvss3_nvd_basescore	9.8	nist.gov	02/01/2023	shingilam	90
13621251	02/01/2023	VulDB…	cvss2_nvd_basescore	5.2	nist.gov	02/01/2023	shingilam	90
13621250	02/01/2023	VulDB…	cvss3_meta_tempscore	6.9	see CVSS documentation	02/01/2023	shingilam	90
13621249	02/01/2023	VulDB…	cvss3_meta_basescore	6.9	see CVSS documentation	02/01/2023	shingilam	90
13621248	02/01/2023	VulDB…	cve_cna	VulDB	nvd.nist.gov	02/01/2023	shingilam	70
13621247	02/01/2023	VulDB…	cvss3_cna_a	L	nvd.nist.gov	02/01/2023	shingilam	70
13621246	02/01/2023	VulDB…	cvss3_cna_i	L	nvd.nist.gov	02/01/2023	shingilam	70
13621245	02/01/2023	VulDB…	cvss3_cna_c	L	nvd.nist.gov	02/01/2023	shingilam	70
13621244	02/01/2023	VulDB…	cvss3_cna_s	U	nvd.nist.gov	02/01/2023	shingilam	70
13621243	02/01/2023	VulDB…	cvss3_cna_ui	N	nvd.nist.gov	02/01/2023	shingilam	70
13621242	02/01/2023	VulDB…	cvss3_cna_pr	L	nvd.nist.gov	02/01/2023	shingilam	70
13621241	02/01/2023	VulDB…	cvss3_cna_ac	L	nvd.nist.gov	02/01/2023	shingilam	70
13621240	02/01/2023	VulDB…	cvss3_cna_av	A	nvd.nist.gov	02/01/2023	shingilam	70
13621239	02/01/2023	VulDB…	cvss2_nvd_ai	P	nvd.nist.gov	02/01/2023	shingilam	70
13621238	02/01/2023	VulDB…	cvss2_nvd_ii	P	nvd.nist.gov	02/01/2023	shingilam	70
13621237	02/01/2023	VulDB…	cvss2_nvd_ci	P	nvd.nist.gov	02/01/2023	shingilam	70
13621236	02/01/2023	VulDB…	cvss2_nvd_au	S	nvd.nist.gov	02/01/2023	shingilam	70
13621235	02/01/2023	VulDB…	cvss2_nvd_ac	L	nvd.nist.gov	02/01/2023	shingilam	70
13621234	02/01/2023	VulDB…	cvss2_nvd_av	A	nvd.nist.gov	02/01/2023	shingilam	70