CVE-2017-15373

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...

Sql injection

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...

CVE-2017-15373

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...

CVE-2017-15373

CVE-2017-15373 : E-Sic 1.0 contains a SQL injection in the query parameter “q” of esiclivre/restrito/inc/lkpcep.php (the search private area). The root cause is improper handling of input leading to arbitrary SQL execution. Impact is described as partial to high confidentiality, integrity, and av...

CVE-2017-15373: Improper Neutralization of Special Elements used in an SQL Command

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...

PT-2017-14031

Name of the Vulnerable Software and Affected Versions E-Sic version 1.0 Description The issue allows SQL injection via the q parameter to the "esiclivre/restrito/inc/lkpcep.php" endpoint, which is related to the search private area. Recommendations For E-Sic version 1.0, consider restricting acce...