CVE-2017-15381

CVE-2017-15381 affects E-Sic 1.0, with a SQL Injection vulnerability in the f parameter of esiclivre/restrito/inc/buscacep.php (zip code search). Root cause: unsanitized input in the f parameter leads to arbitrary SQL execution. Exploitation context: remote network exploitation; impact described ...

CVE-2017-15381: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in E-Sic 1.0 via the f parameter to esiclivre/restrito/inc/buscacep.php aka the zip code search script...

PT-2017-14038

Name of the Vulnerable Software and Affected Versions E-Sic version 1.0 Description A SQL Injection issue exists via the f parameter to the "esiclivre/restrito/inc/buscacep.php" script, which is used for zip code search. Recommendations For E-Sic version 1.0, consider restricting access to the...