CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Antideo Antideo Email Validator antideo-email-validator allows Blind SQL Injection.This issue affects Antideo Email Validator: from n/a through <= 1.0.10.
Explanation of Vulnerability in Simple Terms
Antideo Email Validator versions 1.0.10 and earlier contain a SQL injection vulnerability in the email validation logic. An attacker can craft malicious input to execute arbitrary SQL queries against the application's database. The vulnerability requires specific conditions to exploit but can result in unauthorized data access and partial service disruption.
What an attacker can do
Execute SQL queries to read or modify database contents without authorization.
Potential impact on your site
Attacker could access sensitive data stored in the database or cause temporary service degradation.
Conditions required to exploit
Network access to the application; specific attack conditions must be met (high complexity).
Key dates
External resources
Related vulnerabilities
