Lucene search
+L

3 matches found

OSV
OSV
•added 2017/08/06 3:29 a.m.•27 views

CVE-2017-12585

SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAXlookuphandler.php tableName and tableFields parameters, admin/AJAXcheckid.php, and admin/AJAXvocabolarycontrol.php. It can be exploited by remote authenticated librarian users...

8.8CVSS7.7AI score
SaveExploits0References1
Mend
Mend
•added 2017/08/06 3:00 a.m.•2 views

CVE-2017-12585

SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAXlookuphandler.php tableName and tableFields parameters, admin/AJAXcheckid.php, and admin/AJAXvocabolarycontrol.php. It can be exploited by remote authenticated librarian users...

8.8CVSS0.01745EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/06 12:00 a.m.•6 views

CVE-2017-12585: Improper Neutralization of Special Elements used in an SQL Command

SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAXlookuphandler.php tableName and tableFields parameters, admin/AJAXcheckid.php, and admin/AJAXvocabolarycontrol.php. It can be exploited by remote authenticated librarian users...

8.8CVSS5.8AI score0.01745EPSS
SaveExploits1References2
Rows per page
Query Builder