Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2020/06/10 8:03 p.m.•136 views

SQL Injection in Geocoder

sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when withinboundingbox is used in conjunction with untrusted swlat, swlng, nelat, or nelng data...

9.8CVSS9.7AI score0.01484EPSS
SaveExploits0References7Affected Software1
Mend
Mend
•added 2020/01/25 7:18 p.m.•2 views

CVE-2020-7981

sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when withinboundingbox is used in conjunction with untrusted swlat, swlng, nelat, or nelng data...

9.8CVSS0.01484EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/25 12:00 a.m.•4 views

CVE-2020-7981: Improper Neutralization of Special Elements used in an SQL Command

sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when withinboundingbox is used in conjunction with untrusted swlat, swlng, nelat, or nelng data...

9.8CVSS8.2AI score0.01484EPSS
SaveExploits0References2
Rows per page
Query Builder