EUVD-2019-18433

Malware in sbrugna...

CVE-2019-9047

GoRose v1.0.4 has SQL Injection when the orderby or groupby parameter can be controlled...

Sql injection

GoRose v1.0.4 has SQL Injection when the orderby or groupby parameter can be controlled...

CVE-2019-9047

GoRose v1.0.4 has SQL Injection when the orderby or groupby parameter can be controlled...

CVE-2019-9047

GoRose v1.0.4 has SQL Injection when the orderby or groupby parameter can be controlled...

CVE-2019-9047

GoRose v1.0.4 is affected by SQL Injection when the order_by or group_by parameter can be controlled, as described in CVE-2019-9047. The root cause is unsafe handling of these parameters leading to injection. CVSS metrics indicate severity ranges from 7.5 (AV:N/AC:L/PR:N/UI:N/S:C/C:P/I:P/A:P) in ...