Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/07/01 11:22 a.m.3 views

CVE-2025-5878

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

7.5CVSS7.5AI score0.00626EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/29 11:11 a.m.2 views

CVE-2025-5878 ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

7.5CVSS7.6AI score0.00626EPSS
Exploits0References9
CVE
CVE
added 2025/06/29 11:11 a.m.38 views

CVE-2025-5878

CVE-2025-5878 affects the ESAPI Java legacy library, specifically the Encoder.encodeForSQL function in the SQL Injection Defense. The vulnerability arises from improper neutralization of special elements, enabling a remote attacker to exploit SQL injection. Public proof-of-concept exploits exist....

7.5CVSS7.6AI score0.00626EPSS
Exploits0References10
Debian CVE
Debian CVE
added 2025/06/29 11:11 a.m.4 views

CVE-2025-5878

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

7.5CVSS6.8AI score0.00626EPSS
Exploits0
Cvelist
Cvelist
added 2025/06/29 11:11 a.m.14 views

CVE-2025-5878 ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

7.5CVSS0.00626EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2025/06/29 12:0 a.m.5 views

PT-2025-27359

Name of the Vulnerable Software and Affected Versions: ESAPI esapi-java-legacy versions prior to 2.7.0.0 Description: A vulnerability was found in the interface Encoder.encodeForSQL of the SQL Injection Defense, leading to an improper neutralization of special elements. The attack may be initiate...

9.8CVSS6.6AI score0.01032EPSS
Exploits3References26
Rows per page
Query Builder