CVE-2018-14967

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter...

CVE-2018-14967

CVE-2018-14967 affects EMLsoft 5.4.5. The vulnerability is a SQL injection in upload\eml\action\action.user.php via the numPerPage parameter, allowing a remote attacker to view, add, modify, or delete information in the back-end database. No exploit details or fixes are provided in the connected ...