3 matches found
CVE-2020-10218
A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter because of the HolidaydatesController.php addAction function...
CVE-2020-10218: Improper Neutralization of Special Elements used in an SQL Command
A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter because of the HolidaydatesController.php addAction function...
PT-2020-11979
Name of the Vulnerable Software and Affected Versions Sapplica Sentrifugo version 3.2 Description A Blind SQL Injection issue was discovered in the software. The issue is related to the addAction function in the HolidaydatesController.php file. It can be exploited via the id parameter in the...