PT-2018-14199

Name of the Vulnerable Software and Affected Versions MRCMS versions through 3.1.2 Description An issue was discovered where the WebParam.java file directly accepts the FIELD T parameter in a request and uses it as a hash of SQL statements without filtering. This results in a SQL injection issue ...