CVE-2017-12585

2017-08-0603:29:00

Google

osv.dev

7.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.2%

JSON

SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters), admin/AJAX_check_id.php, and admin/AJAX_vocabolary_control.php. It can be exploited by remote authenticated librarian users.

CPENameOperatorVersion
slims8_akasiaeq8.3.1

CPE	Name	Operator	Version
	slims8_akasia	eq	8.3.1

References

github.com/slims/slims8_akasia/issues/47