CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in chriscarvache eTemplates etemplates allows SQL Injection.This issue affects eTemplates: from n/a through <= 0.2.1.
Explanation of Vulnerability in Simple Terms
eTemplates versions 0.2.1 and earlier contain a SQL injection vulnerability accessible over the network without authentication. An attacker can query or modify the site's database directly. The vulnerability also impacts system availability. Update to a version newer than 0.2.1 immediately.
What an attacker can do
Query or modify the site database and cause service disruption without logging in.
Potential impact on your site
Database contents exposed or corrupted; site may become unavailable.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
