3 matches found
Sql injection
An issue was discovered in OFCMS before 1.1.3. It allows admin/system/generate/create?sql= SQL injection, related to SystemGenerateController.java...
6.5CVSS7.1AI score0.01298EPSS
SaveExploits1References1Affected Software1
CVE-2019-9615
An issue was discovered in OFCMS before 1.1.3. It allows admin/system/generate/create?sql= SQL injection, related to SystemGenerateController.java...
7.2CVSS7.2AI score0.01298EPSS
SaveExploits1References1
CVE-2019-9615: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in OFCMS before 1.1.3. It allows admin/system/generate/create?sql= SQL injection, related to SystemGenerateController.java...
7.2CVSS5.8AI score0.01298EPSS
SaveExploits1References2
20