Sql injection

2019-10-0219:15:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.7%

In Umbraco 7.3.8, there is SQL Injection in the backoffice/PageWApprove/PageWApproveApi/GetInpectSearch method via the nodeName parameter.

CPENameOperatorVersion
umbracoeq7.3.8

CPE	Name	Operator	Version
	umbraco	eq	7.3.8

References

gist.github.com/shiham101/d1de44d1dcf2c33d401ef2f8cbb04f9f

our.umbraco.com/download/releases/738/