Sql injection

Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id parameter...

CVE-2021-32051

Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id parameter...

CVE-2021-32051: Improper Neutralization of Special Elements used in an SQL Command

Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id parameter...

Hexagon G!nius Auskunftsportal SQL Injection Vulnerability

CVE-2021-32051 Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id parameter. Additional Information PoC Payload: id=test' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CHR113||...

PT-2021-19641

Name of the Vulnerable Software and Affected Versions: Hexagon G!nius Auskunftsportal versions prior to 5.0.0.0 Description: The issue allows SQL injection via the id parameter in the "GiPWorkflow/Service/DownloadPublicFile" API endpoint. This could potentially lead to unauthorized access to...

Hexagon G!nius Auskunftsportal SQL Injection

CVE-2021-32051 Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id parameter. Additional Information PoC Payload: id=test' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CHR113||...