Vulnerabilities > CVE-2023-38382 - Unspecified vulnerability in Subscribe to Category Project Subscribe to Category

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

subscribe-to-category-project

critical

NVD

Published: 2023-11-06

Updated: 2024-11-21

Summary

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel Söderström / Sidney van de Stouwe Subscribe to Category allows SQL Injection.This issue affects Subscribe to Category: from n/a through 2.7.4.

Vulnerable Configurations

Part	Description	Count
Application	Subscribe_To_Category_Project Subscribe TO Category Project Subscribe TO Category 2.5.2 Subscribe TO Category Project Subscribe TO Category 2.5.3 Subscribe TO Category Project Subscribe TO Category 2.5.4 Subscribe TO Category Project Subscribe TO Category 2.5.5 Subscribe TO Category Project Subscribe TO Category 2.5.7 Subscribe TO Category Project Subscribe TO Category 2.5.8 Subscribe TO Category Project Subscribe TO Category 2.5.9 Subscribe TO Category Project Subscribe TO Category 2.6.2 Subscribe TO Category Project Subscribe TO Category 2.6.3 Subscribe TO Category Project Subscribe TO Category 2.6.4 Subscribe TO Category Project Subscribe TO Category 2.6.4.1 Subscribe TO Category Project Subscribe TO Category 2.6.5 Subscribe TO Category Project Subscribe TO Category 2.6.6 Subscribe TO Category Project Subscribe TO Category 2.6.7 Subscribe TO Category Project Subscribe TO Category 2.6.8 Subscribe TO Category Project Subscribe TO Category 2.6.9 Subscribe TO Category Project Subscribe TO Category 2.6.11 Subscribe TO Category Project Subscribe TO Category 2.6.12 Subscribe TO Category Project Subscribe TO Category 2.6.13 Subscribe TO Category Project Subscribe TO Category 2.7.1 Subscribe TO Category Project Subscribe TO Category 2.7.2 Subscribe TO Category Project Subscribe TO Category 2.7.3 Subscribe TO Category Project Subscribe TO Category 2.7.4	23

Summary

Vulnerable Configurations

References