3 matches found
SQL Injection in SimpleSAMLphp
The proxystatistics module before 3.1.0 for SimpleSAMLphp allows SQL Injection in lib/Auth/Process/DatabaseCommand.php...
9.8CVSS3.4AI score0.01643EPSS
SaveExploits0References4Affected Software1
CVE-2019-15537: Improper Neutralization of Special Elements used in an SQL Command
The proxystatistics module before 3.1.0 for SimpleSAMLphp allows SQL Injection in lib/Auth/Process/DatabaseCommand.php...
9.8CVSS5.8AI score0.01643EPSS
SaveExploits0References2
PT-2019-14254
Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions prior to 3.1.0 Description The issue allows SQL Injection in the proxystatistics module, specifically in the lib/Auth/Process/DatabaseCommand.php file. Recommendations For versions prior to 3.1.0, update to version 3.1.0...
9.8CVSS0.01643EPSS
SaveExploits0References5
20