CVE-2017-6492

SQL Injection was discovered in admprogram/modules/dates/datesfunction.php in Admidio 3.2.5. The POST parameter datcatid is concatenated into a SQL query without any input validation/sanitization...

CVE-2017-6492

SQL Injection was discovered in admprogram/modules/dates/datesfunction.php in Admidio 3.2.5. The POST parameter datcatid is concatenated into a SQL query without any input validation/sanitization...

CVE-2017-6492

The CVE-2017-6492 entry concerns Admidio 3.2.5, where a SQL Injection vulnerability exists in adm_program/modules/dates/dates_function.php. The POST parameter dat_cat_id is directly concatenated into a SQL query without input validation or sanitization, enabling potential attacker-controlled quer...