CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Web-X Be POPIA Compliant be-popia-compliant allows SQL Injection.This issue affects Be POPIA Compliant: from n/a through 1.2.0.
Explanation of Vulnerability in Simple Terms
Be POPIA Compliant versions up to 1.2.0 contain a SQL injection vulnerability accessible over the network. An attacker can craft a malicious request that, when a user visits a link or page, executes arbitrary SQL queries against the site's database. This can expose sensitive data or degrade site performance. Update to a version newer than 1.2.0.
What an attacker can do
Execute SQL queries to read or modify database contents if a user visits a malicious link.
Potential impact on your site
Database contents may be exposed or corrupted; site availability may be affected.
Conditions required to exploit
Network access and user interaction required; no authentication needed.
Key dates
External resources
Related vulnerabilities
