GitHub Advisoryadvisory · Packagist

GHSA-jjf4-959w-f545 SQL Injection vulnerability in Reportico Till

HIGH Published 2024-03-28 Modified 2024-11-18 Official page ↗
Aliases
CVE-2023-47438
Ecosystem
Packagist
Packages
reportico-web/reportico
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-89
Reviewed
2024-09-04

Affected packages

• Packagist reportico-web/reportico: <= 8.1.0 (no fix yet)

Description

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter.

Related

Alias · CVE (1)

  • CVE-2023-47438 SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the… vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References