CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Uroan Core uroan-core allows Blind SQL Injection.This issue affects Uroan Core: from n/a through <= 1.4.4.
Explanation of Vulnerability in Simple Terms
Uroan Core versions up to 1.4.4 contain a SQL injection vulnerability in an unspecified component. An attacker on the network can craft malicious input to read sensitive data from the database and potentially disrupt service availability. No authentication or user interaction is required. The vulnerability affects the entire application scope.
What an attacker can do
Read sensitive data from the database and cause service disruption without authentication.
Potential impact on your site
Database contents may be exposed; site availability may be degraded. Immediate patching required.
Conditions required to exploit
Network access to the affected Uroan Core installation; no authentication required.
Key dates
External resources
Related vulnerabilities
