Sql injection

2023-12-3017:15:00

PRIOn knowledge base

www.prio-n.com

grupo embras

geosiap erp

sql injection

codlogin parameter

nvd

8.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.0%

Grupo Embras GEOSIAP ERP v2.2.167.02 was discovered to contain a SQL injection vulnerability via the codLogin parameter on the login page.

CPENameOperatorVersion
geosiap_erpeq2.2.167.02

CPE	Name	Operator	Version
	geosiap_erp	eq	2.2.167.02

References

cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html

github.com/VauP/CVE-IDs/blob/main/proof_of_concept.md

owasp.org/www-community/attacks/SQL_Injection