novel-plus list sql injection

CVE-2023-1595

What is CVE-2023-1595?

A vulnerability exists in Novel Plus version 3.6.2, where an improper handling of inputs in the common/log/list file enables SQL injection through manipulation of the 'sort' argument. This flaw allows for remote attackers to execute arbitrary SQL queries, potentially compromising sensitive data. Given that the exploit has been publicly disclosed, immediate defensive measures are recommended to prevent unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References