CVE-2017-20150

  1. Reconshell
  2. Vulnerabilities (CVE)
  3. CVE-2017-20150
A vulnerability was found in challenge website. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The name of the patch is f1644b1d3502e5aa5284f31ea80d2623817f4d42. It is recommended to apply a patch to fix this issue. The identifier VDB-216989 was assigned to this vulnerability.

8.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://vuldb.com/?id.216989 Permissions Required Third Party Advisory
https://vuldb.com/?ctiid.216989 Permissions Required Third Party Advisory
https://github.com/Challenge/website/commit/f1644b1d3502e5aa5284f31ea80d2623817f4d42 Patch Third Party Advisory
Advertisement

NeevaHost hosting service
Configurations

Configuration 1 (hide)

cpe:2.3:a:challenge_website_project:challenge_website:*:*:*:*:*:*:*:*
Information

Published : 2022-12-28 11:15

Updated : 2023-01-06 10:46

NVD link : CVE-2017-20150

Mitre link : CVE-2017-20150

JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa
Products Affected

challenge_website_project

  • challenge_website