PT-2019-12258

Name of the Vulnerable Software and Affected Versions Snare Central versions prior to 7.4.5 Description A SQL injection issue allows remote authenticated attackers to execute arbitrary SQL commands via the "AgentConsole/UserGroupQuery.php" endpoint, specifically through the ShowUser parameter...

CVE-2019-11363: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter...