Sql injection

2023-12-1500:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

cybrosys techno solutions

website search blog

remote attacker

arbitrary code execution

privilege escalation

controllers

main.py

9.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.9%

JSON

A SQL injection vulnerability in Cybrosys Techno Solutions Website Blog Search (aka website_search_blog) v. 13.0 through 13.0.1.0.1 allows a remote attacker to execute arbitrary code and to gain privileges via the name parameter in controllers/main.py component.

CPENameOperatorVersion
website_blog_searchge13.0
website_blog_searchle13.0.1.0.1

CPE	Name	Operator	Version
	website_blog_search	ge	13.0
	website_blog_search	le	13.0.1.0.1

References

github.com/luvsn/OdZoo/tree/main/exploits/website_search_blog