CVE-2017-9848

CVE-2017-9848 affects Ideagen Easysite 7.0, specifically the WebServices component C_InfoService.asmx. A SQL injection vulnerability exists in GetArticleHitsArray when processing a crafted XML document containing a targeted ArticleIDs element, enabling remote attackers to execute arbitrary SQL co...