CVE-2018-12977

A SQL injection vulnerability in the SoftExpert SE Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section...

CVE-2018-12977: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the SoftExpert SE Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section...

PT-2018-11509

Name of the Vulnerable Software and Affected Versions SoftExpert Excellence Suite version 2.0 Description A SQL injection issue allows remote authenticated users to perform SQL heuristics by pulling information from the database. This is achieved by manipulating the cddocument parameter in the...

SoftExpert Excellence Suite 2.0 - 'cddocument' SQL Injection

Exploit Title: SoftExpert Excellence Suite 2.0 - 'cddocument' SQL Injection Author: Seren PORSUK Date: 2018-06-28 Type: webapps Platform: PHP CVE= N/A Vendor Homepage : https://www.softexpert.com/solucao/softexpert-excellence-suite/ DETAILS A SQL injection vulnerability in the SoftExpert SE...