Vulnerability CVE-2023-50429

Vulnerability CVE-2023-50429

Published: 2023-12-09 Modified: 2023-12-14

Description:

IzyBat Orange casiers before 20230803_1 allows getEnsemble.php ensemble SQL injection.

Type:

CWE-89

(Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))

Affected software
Izybat -> Orange casiers

References:

https://github.com/orangecertcc/security-research/security/advisories/GHSA-mc3w-rv8p-f9xf

Copyright 2024, cxsecurity.com