CVE-2018-16353: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the /index.php/Customer/read limit parameter...

PT-2018-13512

Name of the Vulnerable Software and Affected Versions FHCRM versions prior to 2018-02-11 Description An issue was discovered that allows SQL injection via the "/index.php/Customer/read" API endpoint, specifically through the limit parameter. Recommendations For versions prior to 2018-02-11,...