Sql injection

2021-10-0816:15:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%

JSON

webTareas version 2.4 and earlier allows an unauthenticated user to perform Time and Boolean-based blind SQL Injection on the endpoint /includes/library.php, via the sor_cible, sor_champs, and sor_ordre HTTP POST parameters. This allows an attacker to access all the data in the database and obtain access to the webTareas application.