mapl3miss/novel-plusSQLi

mapl3miss/novel-plusSQLi

Releases0

CVE History

CVEPublishedCVSS v3CVSS v2
6.3 MEDIUM6.5 MEDIUM

A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /novel/friendLink/list. The manipulation of the argument sort leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.