6 matches found
CVE-2019-13957
In Umbraco 7.3.8, there is SQL Injection in the backoffice/PageWApprove/PageWApproveApi/GetInpectSearch method via the nodeName parameter...
Sql injection
In Umbraco 7.3.8, there is SQL Injection in the backoffice/PageWApprove/PageWApproveApi/GetInpectSearch method via the nodeName parameter...
CVE-2019-13957
In Umbraco 7.3.8, there is SQL Injection in the backoffice/PageWApprove/PageWApproveApi/GetInpectSearch method via the nodeName parameter...
CVE-2019-13957
In Umbraco 7.3.8, there is SQL Injection in the backoffice/PageWApprove/PageWApproveApi/GetInpectSearch method via the nodeName parameter...
CVE-2019-13957: Improper Neutralization of Special Elements used in an SQL Command
In Umbraco 7.3.8, there is SQL Injection in the backoffice/PageWApprove/PageWApproveApi/GetInpectSearch method via the nodeName parameter...
PT-2019-13494
Name of the Vulnerable Software and Affected Versions Umbraco version 7.3.8 Description The issue concerns SQL Injection in the backoffice, specifically in the GetInpectSearch method of PageWApproveApi. This occurs via the nodeName parameter. Recommendations For Umbraco version 7.3.8, consider...