2 matches found
CVE-2019-25159: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in mpedraza2020 Intranet del Monterroso up to 4.50.0. It has been classified as critical. This affects an unknown part of the file config/cargos.php. The manipulation of the argument dniprofe leads to sql injection. Upgrading to version 4.51.0 is able to address this...
9.8CVSS5.3AI score0.00497EPSS
SaveExploits0References2
Intranet del Monterroso SQL Injection Vulnerability
Intranet del Monterroso is a web application. A SQL injection vulnerability exists in Intranet del Monterroso version 4.50.0 and prior versions, which stems from a SQL injection vulnerability in the dniprofe parameter of the config/cargos.php file...
9.8CVSS8AI score0.00497EPSS
SaveExploits0References5
20