Sql injection

2023-02-0819:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

future-depth

ims

vulnerability

arbitrary commands

admin area

9.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.9%

JSON

SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows attackers to execute arbitrary commands via the ad parameter to /admin_area/login_transfer.php.

CPENameOperatorVersion
institutional_management_websiteeq1.0

CPE	Name	Operator	Version
	institutional_management_website	eq	1.0

References

github.com/Future-Depth/IMS/issues/1