CVE-2019-15572

The CVE-2019-15572 entry describes an SQL injection in Gesior-AAC’s shop.php, affecting versions prior to 2019-05-01. Root cause cited in CNVD-2019-31345 notes lack of validation for externally entered SQL statements in database-driven apps, enabling an attacker to execute arbitrary SQL commands....

CVE-2019-15573

Gesior-AAC contains an SQL injection vulnerability in tankyou.php for builds before 2019-05-01. The CVE-2019-15573 entry is corroborated by multiple sources (e.g., NVD) with a high/critical severity (CVSS 2.0 base 7.5; CVSS 3.0 base 9.8). The provided connected documents confirm the affected comp...

CVE-2019-15574

Gesior-AAC before 2019-05-01 has a serviceID SQL injection in accountmanagement.php. Root cause: lack of validation/sanitization of externally entered SQL statements in a database-based application. Impact: allows execution of arbitrary SQL commands (partial/high confidentiality, integrity, and a...