CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RiceTheme Felan Framework felan-framework allows SQL Injection.This issue affects Felan Framework: from n/a through <= 1.1.3.
Explanation of Vulnerability in Simple Terms
Felan Framework versions up to 1.1.3 contain a SQL injection vulnerability that allows unauthenticated attackers to read sensitive data from the database and cause service disruptions. The vulnerability requires no user interaction and can be exploited over the network. An attacker can extract confidential information or degrade site performance without authentication.
What an attacker can do
Read sensitive data from the database and cause the site to become slow or unresponsive.
Potential impact on your site
Attackers can steal database contents (user data, credentials, posts) and disrupt site availability without warning.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
