Lucene search

K
prionPRIOn knowledge basePRION:CVE-2015-8355
HistoryAug 24, 2017 - 9:29 p.m.

Sql injection

2017-08-2421:29:00
PRIOn knowledge base
www.prio-n.com
5

8.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.1%

Multiple SQL injection vulnerabilities in the orion.extfeedbackform module before 2.1.3 for Bitrix allow remote authenticated users to execute arbitrary SQL commands via the (1) order or (2) “by” parameter to admin/orion.extfeedbackform_efbf_forms.php.

CPENameOperatorVersion
bitrixle2.1.2

8.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.1%

Related for PRION:CVE-2015-8355