2 matches found
Sql injection
Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the logid parameter to admin/editgroup.php...
6.5CVSS7.4AI score0.00928EPSS
SaveExploits3References1Affected Software1
CVE-2017-15949: Improper Neutralization of Special Elements used in an SQL Command
Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the logid parameter to admin/editgroup.php...
7.2CVSS7.2AI score0.00928EPSS
SaveExploits3References2
20