CVE-2017-15381

CVE-2017-15381 affects E-Sic 1.0, with a SQL Injection vulnerability in the f parameter of esiclivre/restrito/inc/buscacep.php (zip code search). Root cause: unsanitized input in the f parameter leads to arbitrary SQL execution. Exploitation context: remote network exploitation; impact described ...