Sql injection

2023-12-1501:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

grzegorz marczynski dynamic progress bar

remote attacker

gain privileges

recency parameter

web_progress.py

8.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.3%

JSON

A SQL injection vulnerability in Grzegorz Marczynski Dynamic Progress Bar (aka web_progress) v. 11.0 through 11.0.2, v12.0 through v12.0.2, v.13.0 through v13.0.2, v.14.0 through v14.0.2.1, v.15.0 through v15.0.2, and v16.0 through v16.0.2.1 allows a remote attacker to gain privileges via the recency parameter in models/web_progress.py component.

CPENameOperatorVersion
dynamic_progress_barge16.0
dynamic_progress_barle16.0.2.1
dynamic_progress_barge15.0
dynamic_progress_barle15.0.2
dynamic_progress_barge14.0
dynamic_progress_barle14.0.2.1
dynamic_progress_barge13.0
dynamic_progress_barle13.0.2
dynamic_progress_barge12.0
dynamic_progress_barle12.0.2

Name	Operator	Version
dynamic_progress_bar	ge	16.0
dynamic_progress_bar	le	16.0.2.1
dynamic_progress_bar	ge	15.0
dynamic_progress_bar	le	15.0.2
dynamic_progress_bar	ge	14.0
dynamic_progress_bar	le	14.0.2.1
dynamic_progress_bar	ge	13.0
dynamic_progress_bar	le	13.0.2
dynamic_progress_bar	ge	12.0
dynamic_progress_bar	le	12.0.2