SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName parameter to /plugin/dataDictionary/tableView.do.
References
Link | Resource |
---|---|
https://github.com/xnx3/wangmarket/issues/7 | Exploit Issue Tracking |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2023-04-28T00:00:00
Updated: 2023-04-28T00:00:00
Reserved: 2023-02-27T00:00:00
Link: CVE-2023-26813
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-04-28T20:15:13.970
Modified: 2023-05-09T02:25:14.460
Link: CVE-2023-26813
JSON object: View
Redhat Information
No data.
CWE