EUVD-2019-7067

Malware in sbrugna...

Sql injection

In Escuela de Gestion Publica Plurinacional EGPP Sistema Integrado de Gestion Academica GESAC v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attackers to access the database...

CVE-2019-16264

In Escuela de Gestion Publica Plurinacional EGPP Sistema Integrado de Gestion Academica GESAC v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attackers to access the database...

CVE-2019-16264

CVE-2019-16264 affects EGPP GESAC v1. The vulnerability is a SQL injection in the username parameter of the authentication form, enabling database access. Root cause: improper input handling in the login query. Affected component: authentication form of GESAC v1. Exploitation status: not stated i...