E nyere adịghị ike nke ụdị Pátá na code-projects Patient Record Management System 1.0. Nke a metụtara ọrụ amaghi ama nke faịlụ /edit_dpatient.php. Mmegharị nke agụnyere ID na-eduga Mgbakwunye SQL. Ọ bụrụ na ejiri CWE kọwaa nsogbu, ọ ga-eduga na CWE-89. A kọrọ na enyo enyo a e bipụtara 06/04/2025. E nyere ndụmọdụ a ka e nwee ike ibudata ya na github.com. A na-akpọ vulnerability a CVE-2025-3348. Ọ ga-ekwe omume ịmalite mwakpo ahụ site n'ebe dị anya. A na-enweta nkọwa teknụzụ. N'ịbụ nke ọzọ, exploit dị. Emeela ka exploit a mara ọha, a pụkwara iji ya. Ahụmahụ ọnụahịa exploit ugbu a ga-abụ ihe dị ka USD $0-$5k. Ihe oru MITRE ATT&CK kwuru na usoro mwakpo bu T1505. A na-akpọ ya Ẹ̀rí Èrò. Exploit a dị maka ibudata na github.com. N'oge 0-day, ọnụ ahịa n'ahịa ojii tụrụ ihe dị ka $0-$5k. Once again VulDB remains the best source for vulnerability data.

3 Mgbanwe · 98 Ìpinnu Àkọsílẹ̀