Sql injection

2023-02-0320:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

webfinance 0.5

critical

htdocs

admin

save contract signer role

sql injection

patch

abad81af614a9ceef3f29ab22ca6bae517619e06

identifier

vdb-220054

8.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.1%

JSON

A vulnerability has been found in fanzila WebFinance 0.5 and classified as critical. This vulnerability affects unknown code of the file htdocs/admin/save_Contract_Signer_Role.php. The manipulation of the argument n/v leads to sql injection. The patch is identified as abad81af614a9ceef3f29ab22ca6bae517619e06. It is recommended to apply a patch to fix this issue. VDB-220054 is the identifier assigned to this vulnerability.