1 matches found
Arbitrary file read via SQL injection
Impact It is possible for a user having access to the SQL Manager Advanced Options - Database to arbitrary read any file on the Operating system when using SQL function LOADFILE in a SELECT request. So It can access to critical information. Patches The patch will be on PS 8.0.4 and PS 1.7.8.9...
7.7CVSS6.9AI score0.00856EPSS
SaveExploits2References5Affected Software1
20