Lucene search
+L

3 matches found

OSV
OSV
•added 2018/04/20 6:29 p.m.•28 views

CVE-2018-1290

In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a single quotation escape with two continuous SQL parameters can cause a SQL injection. This could be done in Methods like retrieveAuditEntries of AuditsApiResource Class and retrieveCommands of...

9.8CVSS9.9AI score
SaveExploits0References2
Cvelist
Cvelist
•added 2018/04/20 6:00 p.m.•39 views

CVE-2018-1290

In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a single quotation escape with two continuous SQL parameters can cause a SQL injection. This could be done in Methods like retrieveAuditEntries of AuditsApiResource Class and retrieveCommands of...

9.8AI score0.03234EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/20 12:00 a.m.•2 views

CVE-2018-1290: Improper Neutralization of Special Elements used in an SQL Command

In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a single quotation escape with two continuous SQL parameters can cause a SQL injection. This could be done in Methods like retrieveAuditEntries of AuditsApiResource Class and retrieveCommands of...

9.8CVSS8.1AI score0.03234EPSS
SaveExploits0References2
Rows per page
Query Builder