EUVD-2018-9324

Malware in sbrugna...

CVE-2018-17575

SWA SWA.JACAD 3.1.37 Build 024 has SQL Injection via the /academico/aluno/esqueci-minha-senha/ studentId parameter...

Sql injection

SWA SWA.JACAD 3.1.37 Build 024 has SQL Injection via the /academico/aluno/esqueci-minha-senha/ studentId parameter...

CVE-2018-17575

CVE-2018-17575 affects SWA.JACAD 3.1.37 Build 024. The SQL injection vulnerability occurs in the /academico/aluno/esqueci-minha-senha/ page via the studentId parameter. Based on CNVD/CVE listings, a remote attacker can exploit this to execute arbitrary SQL commands. The provided documents do not ...

CVE-2018-17575

SWA SWA.JACAD 3.1.37 Build 024 has SQL Injection via the /academico/aluno/esqueci-minha-senha/ studentId parameter...

CVE-2018-17575: Improper Neutralization of Special Elements used in an SQL Command

SWA SWA.JACAD 3.1.37 Build 024 has SQL Injection via the /academico/aluno/esqueci-minha-senha/ studentId parameter...