barronwaffles dwc_network_server_emulator gs_database.py update_profile sql injection
Published Dec 25, 2022
9.8
CRITICALCVSS 3.1
EPSS 0.71%
Description
A vulnerability was found in barronwaffles dwc_network_server_emulator. It has been declared as critical. This vulnerability affects the function update_profile of the file gamespy/gs_database.py. The manipulation of the argument firstname/lastname leads to sql injection. The attack can be initiated remotely. The name of the patch is f70eb21394f75019886fbc2fb536de36161ba422. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216772.
Affected products
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||
|---|---|---|---|---|---|---|
| Barronwaffles | Dwc Network Server Emulator | n/a |
|
- < 2020-07-10
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (5)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-24086 Advisory
- https://github.com/barronwaffles/dwc_network_server_emulator/commit/f70eb21394f75019886fbc2fb536de36161ba422 patchThird Party Advisory
- https://github.com/barronwaffles/dwc_network_server_emulator/pull/538 issue-trackingPatchThird Party Advisory
- https://vuldb.com/?ctiid.216772 signaturepermissions-requiredThird Party Advisory
- https://vuldb.com/?id.216772 vdb-entrytechnical-descriptionThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-24086 | Advisory | |
| https://github.com/barronwaffles/dwc_network_server_emulator/commit/f70eb21394f75019886fbc2fb536de36161ba422 | patchThird Party Advisory | |
| https://github.com/barronwaffles/dwc_network_server_emulator/pull/538 | issue-trackingPatchThird Party Advisory | |
| https://vuldb.com/?ctiid.216772 | signaturepermissions-requiredThird Party Advisory | |
| https://vuldb.com/?id.216772 | vdb-entrytechnical-descriptionThird Party Advisory |
Change history (0)
No recorded changes yet.