Sql injection

2017-10-0501:29:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.6%

JSON

[ERPNext][Frappe Version <= 7.1.27] SQL injection vulnerability in frappe.share.get_users allows remote authenticated users to execute arbitrary SQL commands via the fields parameter.

CPENameOperatorVersion
frappele7.1.27

CPE	Name	Operator	Version
	frappe	le	7.1.27

References

tech.mantz-it.com/2016/12/sql-injection-in-frappe-framework.html