Lucene search
MitreCVELIST:CVE-2018-17796HistorySep 30, 2018 - 8:00 p.m.
CVE-2018-17796
2018-09-3020:00:00
mitre
www.cve.org
5
EPSS
0.002
Percentile
56.7%
An issue was discovered in MRCMS (aka mushroom) through 3.1.2. The WebParam.java file directly accepts the FIELD_T parameter in a request and uses it as a hash of SQL statements without filtering, resulting in a SQL injection vulnerability in getChannel() in the ChannelService.java file.
References
Related
cve
cve
CVE-2018-17796
2018-09-30 20:29:00
prion
prion
Sql injection
2018-09-30 20:29:00
osv
osv
CVE-2018-17796
2018-09-30 20:29:00
nvd
nvd
CVE-2018-17796
2018-09-30 20:29:00