Lucene search
PRIOn knowledge basePRION:CVE-2016-9048HistorySep 10, 2018 - 4:29 p.m.
Sql injection
2018-09-1016:29:00
PRIOn knowledge base
www.prio-n.com
2
Multiple exploitable SQL Injection vulnerabilities exists in ProcessMaker Enterprise Core 3.0.1.7-community. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and in certain setups access the underlying operating system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| processmaker | eq | 3.0.1.7 | |
| processmaker | eq | 3.0.1.7 |
Related
cve
cve
CVE-2016-9048
2018-09-10 16:29:00
seebug
seebug
cvelist
cvelist
CVE-2016-9048
2017-07-19 00:00:00
nvd
nvd
CVE-2016-9048
2018-09-10 16:29:00
talos
talos
ProcessMaker Enterprise Core Multiple SQL Injection Vulnerabilities
2017-07-19 00:00:00
talosblog
talosblog