Vulners
Lucene search
3 matches found
Sql injection
A SQL injection bypass aka PL1 bypass exists in OWASP ModSecurity Core Rule Set owasp-modsecurity-crs through v3.1.0-rc3 via ab where a is a special function name such as "if" and b is the SQL statement to be executed...
5CVSS7.9AI score0.01672EPSS
Exploits1References2Affected Software1
CVE-2018-16384
A SQL injection bypass aka PL1 bypass exists in OWASP ModSecurity Core Rule Set owasp-modsecurity-crs through v3.1.0-rc3 via ab where a is a special function name such as "if" and b is the SQL statement to be executed...
7.5CVSS7.7AI score
Exploits0References2
CVE-2018-16384
A SQL injection bypass aka PL1 bypass exists in OWASP ModSecurity Core Rule Set owasp-modsecurity-crs through v3.1.0-rc3 via ab where a is a special function name such as "if" and b is the SQL statement to be executed...
7.5CVSS7.1AI score0.01672EPSS
Exploits1References2
20