CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pressference Pressference Exporter allows SQL Injection.This issue affects Pressference Exporter: from n/a through 1.0.3.
Explanation of Vulnerability in Simple Terms
Pressference Exporter versions up to 1.0.3 contain a SQL injection vulnerability in a function requiring high-level privileges. An authenticated administrator can craft malicious input to read sensitive database records or modify data. The vulnerability requires administrative access and does not affect site availability.
What an attacker can do
Read or modify database records via SQL injection.
Potential impact on your site
An admin account holder can extract sensitive data or alter database contents without authorization.
Conditions required to exploit
Administrator account access; no user interaction required.
Key dates
External resources
Related vulnerabilities
