A SQL injection vulnerability in Cybrosys Techno Solutions Website Blog Search (aka website_search_blog) v. 13.0 through 13.0.1.0.1 allows a remote attacker to execute arbitrary code and to gain privileges via the name parameter in controllers/main.py component.
References
| Link | Resource |
|---|---|
| https://github.com/luvsn/OdZoo/tree/main/exploits/website_search_blog | Exploit Third Party Advisory |
| https://github.com/luvsn/OdZoo/tree/main/exploits/website_search_blog | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 08:31
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/luvsn/OdZoo/tree/main/exploits/website_search_blog - Exploit, Third Party Advisory |
20 Dec 2023, 14:24
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-89 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:cybrosys:website_blog_search:*:*:*:*:*:odoo:*:* | |
| References | () https://github.com/luvsn/OdZoo/tree/main/exploits/website_search_blog - Exploit, Third Party Advisory |
15 Dec 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-15 00:15
Updated : 2024-11-21 08:31
NVD link : CVE-2023-48049
Mitre link : CVE-2023-48049
CVE.ORG link : CVE-2023-48049
JSON object : View
Products Affected
cybrosys
- website_blog_search
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')