2 matches found
Sql injection
Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are jidt118, jidt120, jidt122, jidt124, jidt126, jidt128, and...
6.5CVSS9.2AI score0.01086EPSS
SaveExploits0References1Affected Software1
CVE-2018-6792: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are jidt118, jidt120, jidt122, jidt124, jidt126, jidt128, and...
8.8CVSS8.1AI score0.01086EPSS
SaveExploits0References2
20