2 matches found
Sql injection
A SQL injection vulnerability in the SoftExpert SE Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section...
6.5CVSS8.4AI score0.01441EPSS
SaveExploits0References1Affected Software1
CVE-2018-12977: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the SoftExpert SE Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section...
8.8CVSS7.8AI score0.01441EPSS
SaveExploits0References2
20