Lucene search
China National Vulnerability DatabaseCNVD-2023-66420HistoryAug 12, 2023 - 12:00 a.m.
ScienceLogic SL1 SQL Injection Vulnerability (CNVD-2023-66420)
2023-08-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
sciencelogic inc. sql injection validation data flow workflow vulnerability steal sensitive data database cnvd-2023-66420
EPSS
0.001
Percentile
31.7%
ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL statements by the schedule editor decoupled feature, and can be exploited by an attacker to execute illegal SQL commands to steal sensitive database data.
Related
cve
cve
CVE-2022-48588
2023-08-09 18:15:12
nvd
nvd
CVE-2022-48588
2023-08-09 18:15:12
prion
prion
Sql injection
2023-08-09 18:15:00
cvelist
cvelist
CVE-2022-48588
2023-08-09 17:47:49