CVE-2017-20150
challenge website sql injection
- State
- Published
- Severity
- 5.5 Medium
- Published
- Dec 28, 2022
- Updated
- Aug 5, 2024
- Reserved
- Dec 28, 2022
Description
A vulnerability was found in challenge website. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The name of the patch is f1644b1d3502e5aa5284f31ea80d2623817f4d42. It is recommended to apply a patch to fix this issue. The identifier VDB-216989 was assigned to this vulnerability.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.5 Medium | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 3.0 | 5.5 Medium | CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | VulDB |
Weaknesses
- CWE-89 SQL Injection
Affected Products
| Product | Versions |
|---|---|
websitechallenge |
|
References
- https://vuldb.com/?id.216989vdb-entry
- https://vuldb.com/?ctiid.216989signaturepermissions-required
- https://github.com/Challenge/website/commit/f1644b1d3502e5aa5284f31ea80d2623817f4d42patch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.