Description
translation_manage_text.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 directly insert values from the aSortDir_0 and/or sSortDir_0 parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database, aka SQL Injection.
References (2)
Core 2
Core References
Various Sources x_refsource_misc
https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459
Exploit, Third Party Advisory x_refsource_misc
https://github.com/jra89/CVE-2019-19732
Scores
CVSS v3
7.2
EPSS
0.0109
EPSS Percentile
61.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (1)
mfscripts/yetishare
3.5.2 - 4.5.3
Published
Dec 30, 2019
Tracked Since
Feb 18, 2026