CVE-2023-41262 | BDVDB-2026-213979 Detail

Description#

An issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV is vulnerable to SQL injection through the sorting parameter, allowing an unauthenticated user to execute arbitrary SQL statements in the context of the application's backend database server.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0001.md

Exploit#

No public exploit known

History#

Version 12023-10-12Record published in the CVE List.
Version 22024-09-18Most recent update recorded in the CVE List.