Vulnerability Description
KBPublisher 6.0.2.1 has SQL Injection via the admin/index.php?module=report entry_id[0] parameter, the admin/index.php?module=log id parameter, or an index.php?View=print&id[]= request.
CVSS Score
9.8
CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Kbpublisher | Kbpublisher | 6.0.2.1 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/154184/KBPublisher-6.0.2.1-SQL-Injection.htExploitThird Party AdvisoryVDB Entry
- https://github.com/pandujar/advisories/blob/master/KBPublisher_6.0.2.1_en.txtExploitThird Party Advisory
- http://packetstormsecurity.com/files/154184/KBPublisher-6.0.2.1-SQL-Injection.htExploitThird Party AdvisoryVDB Entry
- https://github.com/pandujar/advisories/blob/master/KBPublisher_6.0.2.1_en.txtExploitThird Party Advisory
FAQ
What is CVE-2019-10687?
CVE-2019-10687 is a vulnerability with a CVSS score of 9.8 (CRITICAL). KBPublisher 6.0.2.1 has SQL Injection via the admin/index.php?module=report entry_id[0] parameter, the admin/index.php?module=log id parameter, or an index.php?View=print&id[]= request.
How severe is CVE-2019-10687?
CVE-2019-10687 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-10687?
Check the references section above for vendor advisories and patch information. Affected products include: Kbpublisher Kbpublisher.