Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-9846
HistoryJun 28, 2019 - 4:15 p.m.

Sql injection

2019-06-2816:15:00
PRIOn knowledge base
www.prio-n.com
2

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.0%

RockOA 1.8.7 allows remote attackers to obtain sensitive information because the webmain/webmainAction.php publictreestore method constructs a SQL WHERE clause unsafely by using the pidfields and idfields parameters, aka background SQL injection.

CPENameOperatorVersion
rockoalt1.8.7

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.0%

Related for PRION:CVE-2019-9846