Lucene search
PRIOn knowledge basePRION:CVE-2018-8820HistoryMar 28, 2018 - 8:29 p.m.
Sql injection
2018-03-2820:29:00
PRIOn knowledge base
www.prio-n.com
2
An issue was discovered in Square 9 GlobalForms 6.2.x. A Time Based SQL injection vulnerability in the “match” parameter allows remote authenticated attackers to execute arbitrary SQL commands. It is possible to upgrade access to full server compromise via xp_cmdshell. In some cases, the authentication requirement for the attack can be met by sending the default admin credentials.
| CPE | Name | Operator | Version |
|---|---|---|---|
| globalforms | le | 6.2 |
References
Related
nvd
nvd
CVE-2018-8820
2018-03-28 20:29:00
cve
cve
CVE-2018-8820
2018-03-28 20:29:00
packetstorm
packetstorm
Square 9 GlobalForms 6.2.x Blind SQL Injection
2018-03-29 00:00:00
cvelist
cvelist
CVE-2018-8820
2018-03-28 20:00:00
zdt
zdt
Square 9 GlobalForms 6.2.x Blind SQL Injection Exploit
2018-03-29 00:00:00