Description (CNA)
A vulnerability was found in roxlukas LMeve up to 0.1.58. It has been rated as critical. Affected by this issue is the function insert_log of the file wwwroot/ccpwgl/proxy.php. The manipulation of the argument fetch leads to sql injection. Upgrading to version 0.1.59-beta is able to address this issue. The patch is identified as c25ff7fe83a2cda1fcb365b182365adc3ffae332. It is recommended to upgrade the affected component. VDB-217610 is the identifier assigned to this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| roxlukas / LMeve | affected 0.1.0; affected 0.1.1; affected 0.1.2; affected 0.1.3; affected 0.1.4; affected 0.1.5; affected 0.1.6; affected 0.1.7; affected 0.1.8; affected 0.1.9; affected 0.1.10; affected 0.1.11; affected 0.1.12; affected 0.1.13; affected 0.1.14; affected 0.1.15; affected 0.1.16; affected 0.1.17; affected 0.1.18; affected 0.1.19; affected 0.1.20; affected 0.1.21; affected 0.1.22; affected 0.1.23; affected 0.1.24; affected 0.1.25; affected 0.1.26; affected 0.1.27; affected 0.1.28; affected 0.1.29; affected 0.1.30; affected 0.1.31; affected 0.1.32; affected 0.1.33; affected 0.1.34; affected 0.1.35; affected 0.1.36; affected 0.1.37; affected 0.1.38; affected 0.1.39; affected 0.1.40; affected 0.1.41; affected 0.1.42; affected 0.1.43; affected 0.1.44; affected 0.1.45; affected 0.1.46; affected 0.1.47; affected 0.1.48; affected 0.1.49; affected 0.1.50; affected 0.1.51; affected 0.1.52; affected 0.1.53; affected 0.1.54; affected 0.1.55; affected 0.1.56; affected 0.1.57; affected 0.1.58 |
CWE
CWE-89
References
- https://vuldb.com/?id.217610
- https://vuldb.com/?ctiid.217610
- https://github.com/roxlukas/lmeve/commit/c25ff7fe83a2cda1fcb365b182365adc3ffae332
- https://github.com/roxlukas/lmeve/releases/tag/0.1.59-beta
ADP enrichment
No English description supplied.