PT-2023-27132 · Pikachu · Pikachu
Published
2023-08-15
·
Updated
2023-08-17
·
CVE-2023-39849
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Pikachu version 1.0
Description
The issue is a SQL injection vulnerability via the
username parameter at incfunction.php. This allows for potential exploitation. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.Recommendations
For Pikachu version 1.0, as a temporary workaround, consider restricting access to the
username parameter in the affected API endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Pikachu