Sql injection

A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code of the component Cookie Handler. The manipulation of the argument UWASID leads to sql injection Time. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2017-20104

CVE-2017-20104 affects Simplessus 3.7.7. The vulnerability is a SQL injection in the Cookie Handler component triggered by manipulating the UWA_SID parameter. It can be exploited remotely and has been publicly disclosed. Upgrading to version 3.8.3 is the stated remediation. If present, CVSS detai...