CVE-2023-38899

Summary

SQL injection vulnerability in berkaygediz O_Blog v.1.0 allows a local attacker to escalate privileges via the secure_file_priv component.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://o.com
• https://github.com/berkaygediz/O_Blog
• https://github.com/berkaygediz/O_Blog/issues
• https://github.com/berkaygediz/O_Blog/issues/2

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://github.com/berkaygediz/O_Blog
• https://github.com/berkaygediz/O_Blog/issues
• https://github.com/berkaygediz/O_Blog/issues/2

• ←Previous
• Next→