EUVD-2021-18916

Malware in sbrugna...

CVE-2021-32051

Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id parameter...

Sql injection

Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id parameter...

CVE-2021-32051

Hexagon G!nius Auskunftsportal (before 5.0.0.0) is affected by CVE-2021-32051 due to a SQL injection vulnerability in GiPWorkflow/Service/DownloadPublicFile id parameter. The issue stems from inadequate input validation, enabling crafted input to potentially execute arbitrary SQL commands on an O...

CVE-2021-32051

Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id parameter...

CVE-2021-32051: Improper Neutralization of Special Elements used in an SQL Command

Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id parameter...

PT-2021-19641

Name of the Vulnerable Software and Affected Versions: Hexagon G!nius Auskunftsportal versions prior to 5.0.0.0 Description: The issue allows SQL injection via the id parameter in the "GiPWorkflow/Service/DownloadPublicFile" API endpoint. This could potentially lead to unauthorized access to...

Hexagon G!nius Auskunftsportal SQL Injection

CVE-2021-32051 Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id parameter. Additional Information PoC Payload: id=test' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CHR113||...