Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-5520
HistoryOct 26, 2014 - 8:55 p.m.

Sql injection

2014-10-2620:55:00
PRIOn knowledge base
www.prio-n.com
1

9.1 High

AI Score

Confidence

Low

0.104 Low

EPSS

Percentile

95.0%

SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute arbitrary SQL commands via the user_id parameter to plugins/webform/new-form.php, which is not properly handled by plugins/useradmin/fingeruser.php.

CPENameOperatorVersion
xrms_crmeq1.99.2

9.1 High

AI Score

Confidence

Low

0.104 Low

EPSS

Percentile

95.0%

Related for PRION:CVE-2014-5520