Sunnytoo

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Sunnytoo records in CISA KEV

No Sunnytoo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Product Comments 1 record MEDIUM Stblogsearch 1 record MEDIUM Sturls 1 record MEDIUM

Records

1 record in Sturls · all components

TI-2023-24944 CVE-2023-46348 · GHSA-jxxf-4j56-j82w

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to…

MEDIUM 44

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00849 Published 2023-12-14 No fix listed CWE-89

Open these records in search →

Critical	3
High	0
Medium	0
Low	0
No CVSS	0