EUVD-2018-6850

Malware in sbrugna...

EMLsoft 'numPerPage' Parameter SQL Injection Vulnerability

EMLsoft is an enterprise address book management system. A SQL injection vulnerability exists in the upload\eml\action\action.address.php file in EMLsoft version 5.4.5. A remote attacker can exploit this vulnerability to view, add, modify or delete information in the back-end database with the he...

EMLsoft SQL Injection Vulnerability

EMLsoft is an enterprise address book management system. A SQL injection vulnerability exists in the upload\eml\action\action.user.php file in EMLsoft version 5.4.5. A remote attacker can exploit this vulnerability to view, add, modify or delete information in the back-end database with the help ...

CVE-2018-14968

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter...

CVE-2018-14968

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter...

Sql injection

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter...

CVE-2018-14967

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter...

Sql injection

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter...

CVE-2018-14967

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter...

CVE-2018-14968

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter...

CVE-2018-14967

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter...

CVE-2018-14967

CVE-2018-14967 affects EMLsoft 5.4.5. The vulnerability is a SQL injection in upload\eml\action\action.user.php via the numPerPage parameter, allowing a remote attacker to view, add, modify, or delete information in the back-end database. No exploit details or fixes are provided in the connected ...

CVE-2018-14968: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter...

PT-2018-12845

Name of the Vulnerable Software and Affected Versions EMLsoft version 5.4.5 Description An issue was discovered in the software, where the uploademlactionaction.address.php endpoint is vulnerable to SQL Injection via the numPerPage parameter. Recommendations For EMLsoft version 5.4.5, consider...

PT-2018-12844

Name of the Vulnerable Software and Affected Versions EMLsoft version 5.4.5 Description An issue was discovered in the software, where the uploademlactionaction.user.php file is vulnerable to SQL Injection via the numPerPage parameter. Recommendations For EMLsoft version 5.4.5, avoid using the...

CVE-2018-14967: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter...