SQL injection vulnerability in Astrotalks affecting version 10/03/2023. This vulnerability could allow an authenticated local user to send a specially crafted SQL query to the 'searchString' parameter and retrieve all information stored in the database.
References
| Link | Resource |
|---|---|
| https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-astrotalks | Third Party Advisory |
| https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-astrotalks | Third Party Advisory |
Configurations
History
23 Oct 2025, 12:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-astrotalks - Third Party Advisory | |
| CPE | cpe:2.3:a:codester:astrotalks:2023-10-03:*:*:*:*:*:*:* | |
| First Time |
Codester astrotalks
Codester |
Information
Published : 2024-05-31 08:15
Updated : 2025-10-23 12:27
NVD link : CVE-2024-5523
Mitre link : CVE-2024-5523
CVE.ORG link : CVE-2024-5523
JSON object : View
Products Affected
codester
- astrotalks
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')