CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Amol Nirmala Waman Navayan CSV Export navayan-csv-export allows Blind SQL Injection.This issue affects Navayan CSV Export: from n/a through <= 1.0.9.
Explanation of Vulnerability in Simple Terms
Navayan CSV Export versions 1.0.9 and earlier contain a SQL injection vulnerability that allows unauthenticated attackers to read sensitive database information. The vulnerability requires no user interaction and can be exploited over the network. An attacker can also cause partial service disruption by executing resource-intensive queries.
What an attacker can do
Read sensitive data from the site's database without authentication.
Potential impact on your site
Attackers can extract database contents including user credentials, posts, and configuration data.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
