CVSS Meta Temp Score	Garga na exploit ndiyam (≈)	CTI Nganji Score
6.9	$0-$5k	0.86

Gundumabayani

Gaskiya vulnerability da aka ware a matsayin kura an samu a liftkit database har 2.13.1. Hakika, aikin processOrderBy ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil src/Query/Query.php, a cikin sashen $software_component. A sa manipulation ka SQL Injection. Wannan matsala ana saninta da CVE-2016-15020. Babu exploit ɗin da ake samu. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a faggata. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Furɗebayani

Gaskiya vulnerability da aka ware a matsayin kura an samu a liftkit database har 2.13.1. Hakika, aikin processOrderBy ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil src/Query/Query.php, a cikin sashen $software_component. A sa manipulation ka SQL Injection. Idan an yi amfani da CWE don bayyana matsala, zai kai CWE-89. Hakika, rauni an bayyana shi 01/15/2023 kamar 42ec8f2b22e0b0b98fb5b4444ed451c1b21d125a. An raba bayanin tsaro don saukewa a github.com.

Wannan matsala ana saninta da CVE-2016-15020. Tekinikal faɗi ga. Shaharar wannan vulnerability ɗin ƙasa da matsakaici ne. Babu exploit ɗin da ake samu. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro.

Á sàmbu a wondi feere. 0-day shima, an ndiyam a wuro be $0-$5k.

Ana kiran patch ɗin da 42ec8f2b22e0b0b98fb5b4444ed451c1b21d125a. Bugfix ɗin an shirya shi don saukewa a github.com. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a faggata. Wannan shawara ta ƙunshi wannan magana:

Fixed orderBy injection vulnerability

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Kayanbayani

Ngilabe

• liftkit

Sunu

• database

Furɗe

• 2.13.0
• 2.13.1

Laisens

• Borno-wuro

Webseite

• Kayan: https://github.com/liftkit/database/

CPE 2.3bayani

• 🔍
• 🔍
• 🔍

CPE 2.2bayani

• 🔍
• 🔍
• 🔍

CVSSv4bayani

VulDB Furɗo: 🔍
VulDB Gaskiya: 🔍

CVSSv3bayani

VulDB Meta Base Score: 6.9
VulDB Meta Temp Score: 6.9

VulDB Ganda Borno: 5.5
VulDB Temp Score: 5.3
VulDB Furɗo: 🔍
VulDB Gaskiya: 🔍

NVD Ganda Borno: 9.8
NVD Furɗo: 🔍

CNA Ganda Borno: 5.5
CNA Furɗo (VulDB): 🔍

CVSSv2bayani

AV	AC	Au	C	I	A
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳

Vektar	Kumpleksiti	Authentisierung	Kariyandi	Gaskiya	Gashina
furu	furu	furu	furu	furu	furu
furu	furu	furu	furu	furu	furu
furu	furu	furu	furu	furu	furu

VulDB Ganda Borno: 🔍
VulDB Temp Score: 🔍
VulDB Gaskiya: 🔍

NVD Ganda Borno: 🔍

Gargajiyabayani

Klasu: SQL Injection
CWE: CWE-89 / CWE-74 / CWE-707
CAPEC: 🔍
ATT&CK: 🔍

Fizikal: Ayi
Gumti: Ayi
Gana: Ee

Gashina: 🔍
Halitta: A wondi feere
Google Hack: 🔍

EPSS Score: 🔍
EPSS Percentile: 🔍

Furɗo farashi: 🔍
Gaskiya farashi ndiyam: 🔍

0-Day	furu	furu	furu	furu
Lale	furu	furu	furu	furu

Bayani na barazanabayani

Ngam: 🔍
Akteɓe ɓernde: 🔍
Kura APT goruwa masu aiki: 🔍

Kari gamjibayani

Garga: Gargajiya
Halitta: 🔍

0-Day Gana: 🔍

Gargajiya: database 2.13.2
Kari: 42ec8f2b22e0b0b98fb5b4444ed451c1b21d125a

Waktin layibayani

01/15/2023 🔍
01/15/2023 +0 Hənde 🔍
01/15/2023 +0 Hənde 🔍
02/07/2023 +23 Hənde 🔍

Ngizimbayani

Kayan: github.com

Gargaaji: 42ec8f2b22e0b0b98fb5b4444ed451c1b21d125a
Halitta: Gaskiya

CVE: CVE-2016-15020 (🔍)
GCVE (CVE): GCVE-0-2016-15020
GCVE (VulDB): GCVE-100-218391

Gumtibayani

Súgá: 01/15/2023 11:24
Gargadi: 02/07/2023 17:52
Goyarwa: 01/15/2023 11:24 (45), 02/07/2023 17:45 (2), 02/07/2023 17:52 (28)
Gadankam: 🔍
Cache ID: 253:A70:103

Ganaaji

Might our Artificial Intelligence support you?

Check our Alexa App!