3 matches found
Sql injection
Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id parameter...
5CVSS8AI score0.02191EPSS
SaveExploits3References3Affected Software1
CVE-2021-32051: Improper Neutralization of Special Elements used in an SQL Command
Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id parameter...
7.5CVSS5.8AI score0.02191EPSS
SaveExploits3References2
PT-2021-19641
Name of the Vulnerable Software and Affected Versions: Hexagon G!nius Auskunftsportal versions prior to 5.0.0.0 Description: The issue allows SQL injection via the id parameter in the "GiPWorkflow/Service/DownloadPublicFile" API endpoint. This could potentially lead to unauthorized access to...
7.5CVSS0.02191EPSS
SaveExploits3References7
20