Lucene search

China National Vulnerability DatabaseCNVD-2023-98206

HistoryNov 21, 2023 - 12:00 a.m.

Adobe RoboHelp SQL Injection Vulnerability

2023-11-2100:00:00

China National Vulnerability Database

www.cnvd.org.cn

adobe

robohelp

sql injection

vulnerability

windows

audobee

validation

sql statements

attack

sensitive data

database

AI Score

7.9

Confidence

Low

EPSS

0.001

Percentile

48.1%

JSON

Adobe RoboHelp is a help authoring tool developed and released for Windows by the American company Audobee (Adobe). Adobe RoboHelp Server suffers from a SQL injection vulnerability that stems from the application’s lack of validation of externally entered SQL statements. An attacker can exploit the vulnerability to execute illegal SQL commands to steal sensitive database data.