CWE Code: 89
Vulnerability Type: sql_injection
CVSS Score: 7.5
CWE Name:  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Summary: marginalia < 1.6 is affected by: sql injection. the impact is: the impact is a injection of any sql queries when a user controller argument is added as a component. the component is: affects users that add a component that is user controller, for instance a parameter or a header. the attack vector is: hacker inputs a sql to a vulnerable vector(header, http parameter, etc). the fixed version is: 1.6.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-07-24
Last Modified Date: 2019-07-29