CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cnilsson iCafe Library icafe-library allows SQL Injection.This issue affects iCafe Library: from n/a through <= 1.8.3.
Explanation of Vulnerability in Simple Terms
iCafe Library versions 1.8.3 and earlier contain a SQL injection vulnerability accessible to high-privilege users. An attacker with administrative or elevated access can inject malicious SQL commands to read sensitive database information. The vulnerability affects confidentiality severely and can degrade system availability. Update to a version newer than 1.8.3.
What an attacker can do
Read sensitive data from the database and potentially degrade system performance.
Potential impact on your site
If you use iCafe Library, a compromised admin account could expose your database contents to unauthorized access.
Conditions required to exploit
Attacker must have high-level administrative or privileged account access to the application.
Key dates
External resources
