CVE-2019-12946

Elcom CMS before 10.7 has SQL Injection via EventSearchByState.aspx and EventSearchAdv.aspx...

CVE-2019-12946

Elcom CMS before 10.7 has SQL Injection via EventSearchByState.aspx and EventSearchAdv.aspx...

CVE-2019-12946

Elcom CMS before 10.7 has SQL Injection via EventSearchByState.aspx and EventSearchAdv.aspx...

Sql injection

Elcom CMS before 10.7 has SQL Injection via EventSearchByState.aspx and EventSearchAdv.aspx...

CVE-2019-12946

Elcom CMS prior to version 10.7 is vulnerable to SQL Injection via EventSearchByState.aspx and EventSearchAdv.aspx. The issue allows an attacker to influence a SQL query through these endpoints, with a high impact on confidentiality (as reflected by CVSS). The evidence comes from multiple sources...

CVE-2019-12946: Improper Neutralization of Special Elements used in an SQL Command

Elcom CMS before 10.7 has SQL Injection via EventSearchByState.aspx and EventSearchAdv.aspx...

PT-2019-13045

Name of the Vulnerable Software and Affected Versions Elcom CMS versions prior to 10.7 Description The issue is related to SQL Injection, which can occur via the "EventSearchByState.aspx" and "EventSearchAdv.aspx" endpoints. Recommendations For versions prior to 10.7, update to version 10.7 or...