HIGH🇵🇱 Wersja polska

CVE-2024-48814

CVSS 7.5v3.1pub. 2025-01-03upd. 2025-05-28

SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via the ViewType parameter of the findbywhereclause function

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Silverpeas

    APP
    Silverpeas
    6.4.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2024-42850CRITICAL9.8PL ✓same product

Silverpeas – pomijanie wymagań złożoności hasła przy jego zmianie

CVE-2024-36042CRITICAL9.8PL ✓same product

Silverpeas – pominięcie hasła umożliwia dostęp jako superadmin (Auth Bypass)

CVE-2018-19586CRITICAL9.9PL ✓same product

Path Traversal podczas uploadu plików w Silverpeas 5.15–6.0.2

CVE-2023-47320HIGH8.1same product

Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to ex...

CVE-2023-47323HIGH7.5same product

The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID paramete...