Threats tagged 'ghsa-98f9-c7mv-fphv'

Arraytics Booktics versions up to 1.0.22 are affected by a SQL Injection vulnerability that allows blind SQL injection attacks. This vulnerability arises from improper neutralization of special elements in SQL commands. The flaw could allow an attacker with low privileges to execute crafted SQL queries, potentially leading to high confidentiality impact and limited availability impact.