novel-plus list sql injection

CVE-2023-1607

What is CVE-2023-1607?

A vulnerability in the novel-plus application version 3.6.2 allows for SQL injection through the manipulation of the sort argument. This security flaw affects a part of the file system located at /common/sysFile/list and can be exploited remotely, exposing the application to potential data breaches and unauthorized access. The exploit has been publicly disclosed, raising concerns about the security of systems utilizing this version of the software.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References