CVE-2023-36284

An unauthenticated Time-Based SQL injection found in Webkul QloApps 1.6.0 via GET parameter date_from, date_to, and id_product allows a remote attacker to…

published June 23, 2023

CVSS
—
EPSS
3%
Percentile
87.9
In the wild
Unconfirmed
What it is

An unauthenticated Time-Based SQL injection found in Webkul QloApps 1.6.0 via GET parameter date_from, date_to, and id_product allows a remote attacker to bypass a web application's authentication and authorization mechanisms and retrieve the contents of an entire database.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03157 · 87.9th percentile
Published
2023-06-23T00:00Z
EPSS history
Timeline
  • 23 JUN 00:00Z
    An unauthenticated Time-Based SQL injection found in Webkul QloApps 1.6.0 via GET parameter date_from, date_to, and id_product allows a remote attacker to…
    cvelistv5