Sql injection

2021-08-2720:15:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.6%

The GET parameter “id” in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.

CPENameOperatorVersion
wmseq1.0

CPE	Name	Operator	Version
	wms	eq	1.0

References

github.com/FeMiner/wms/issues/7