Safety vulnerability ID: 42234
The information on this page was manually curated by our Cybersecurity Intelligence Team.
Multiple SQL injection vulnerabilities in the get_userinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py in PyWebDAV before 0.9.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) user or (2) pw argument. NOTE: some of these details are obtained from third party information.
Latest version: 0.9.8
WebDAV library including a standalone server for python
This vulnerability has no description
Scan your Python project for dependency vulnerabilities in two minutes
Scan your application