Full-text autocomplete search allows... CVE-2023-26443
-
AV
AC
AU
C
I
A
发布：
2023-08-02
修订：
2024-01-12
Full-text autocomplete search allows user-provided SQL syntax to be injected to SQL statements. With existing sanitization in place, this can be abused to trigger benign SQL Exceptions but could potentially be escalated to a malicious SQL injection vulnerability. We now properly encode single quotes for SQL FULLTEXT queries. No publicly available exploits are known.
漏洞利用/PoC
当前有1条漏洞利用/PoC
受影响的平台与产品
当前有1条受影响产品信息
