EUVD-2018-9181

Malware in sbrugna...

CVE-2018-17428

An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter...

CVE-2018-17428

An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter...

Sql injection

An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter...

CVE-2018-17428

An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter...

CVE-2018-17428

CVE-2018-17428 affects OPAC EasyWeb Five 5.7, with a SQL injection in the w2001/index.php?scelta=campi biblio parameter. The issue is a database query vulnerability in the web application component; CVSS data from multiple sources show a high to critical impact (C/I/A with partial/high implicatio...

PT-2018-14024

Name of the Vulnerable Software and Affected Versions OPAC EasyWeb Five version 5.7 Description An issue was discovered that allows SQL injection via the "w2001/index.php?scelta=campi biblio" parameter. Recommendations For OPAC EasyWeb Five version 5.7, consider restricting access to the vulnerab...

CVE-2018-17428: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter...

OPAC EasyWeb Five 5.7 biblio SQL Injection

Exploit Title: OPAC EasyWeb Five 5.7 - 'biblio' SQL Injection Dork: inurl:"index.php?scelta=campi" Date: 2018-10-02 Exploit Author: Dino Barlattani Vendor Homepage: http://www.nexusfi.it/ Software Link: http://www.nexusfi.it/easyweb.php Version: 5.7 Category: Webapps Platform: PHP CVE: N/A POC:...

OPAC EasyWeb Five 5.7 - biblio SQL Injection Vulnerability

Exploit for php platform in category web applications...

OPAC EasyWeb Five 5.7 - nome SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: OPAC EasyWeb Five 5.7 - 'nome' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://www.nexusfi.it/ Software Link: http://www.nexusfi.it/easyweb.php Version: 5.7 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CV...