4 matches found
Sql injection
HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the admin/login/getWarningInfo/id/ PATHINFO, related to the selectWarning function...
CVE-2017-14145
HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the admin/login/getWarningInfo/id/ PATHINFO, related to the selectWarning function...
PT-2017-13278
Name of the Vulnerable Software and Affected Versions HelpDEZk version 1.1.1 Description The issue concerns a SQL Injection in the loginController.php file, specifically via the "admin/login/getWarningInfo/id/" PATH INFO. This is related to the selectWarning function. Recommendations For HelpDEZk...
CVE-2017-14145: Improper Neutralization of Special Elements used in an SQL Command
HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the admin/login/getWarningInfo/id/ PATHINFO, related to the selectWarning function...