Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2023-43985
Disclosure Date: January 19, 2024 (last updated January 26, 2024)
SunnyToo stblogsearch up to v1.0.0 was discovered to contain a SQL injection vulnerability via the StBlogSearchClass::prepareSearch component.
0
Attacker Value
Unknown
CVE-2023-46348
Disclosure Date: December 14, 2023 (last updated December 19, 2023)
SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods.
0
