Threats tagged 'ghsa-674c-29gj-gv39'

A SQL injection vulnerability exists in SoftNews Media Group DataLife Engine 18.0 within the Search Module's strip_data function. This vulnerability allows remote attackers to manipulate the 'story' argument to execute unauthorized SQL commands. The vulnerability has a CVSS score of 7.3, indicating a medium severity level. The vendor has not responded to disclosure attempts, and no patch or mitigation guidance is currently available. Exploit code is publicly available, but no known exploitation in the wild has been reported.