CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLF: from n/a through <= 1.0.8.7.
Explanation of Vulnerability in Simple Terms
WOLF versions up to 1.0.8.7 contain a SQL injection vulnerability in a high-privilege context. An authenticated administrator can craft malicious input to read sensitive database records. The vulnerability also impacts system availability. A patch version has not been publicly identified.
What an attacker can do
Read sensitive data from the database; cause partial service disruption.
Potential impact on your site
Administrators with malicious intent or compromised admin accounts can extract database contents and degrade system performance.
Conditions required to exploit
Attacker must have high-level administrative privileges on the WOLF installation.
Key dates
External resources
Related vulnerabilities
