CVE-2024-0655: Novel-Plus list sql injection

Published Jan 18, 2024

Updated

A vulnerability has been found in Novel-Plus 4.3.0-RC1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /novel/bookSetting/list. The manipulation of the argument sort leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251383.

Affected Software

1 affected component

xxyopen Novel-Plus=4.3.0-rc1

Event History

Jan 18, 2024

CVE Published

via MITRE·01:31 AM

Data Sourced

via MITRE·01:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-0655?

CVE-2024-0655 is classified as a critical vulnerability.

How do I fix CVE-2024-0655?

To fix CVE-2024-0655, it is advised to upgrade Novel-Plus to a patched version that addresses the SQL injection vulnerability.

What types of attacks can CVE-2024-0655 facilitate?

CVE-2024-0655 can facilitate SQL injection attacks, allowing an attacker to manipulate the database.

Which version of Novel-Plus is affected by CVE-2024-0655?

Novel-Plus version 4.3.0-RC1 is affected by CVE-2024-0655.

What file is associated with CVE-2024-0655?

The vulnerability CVE-2024-0655 is associated with the file /novel/bookSetting/list.