Lucene search
SoftwarepublicoE-sic
3 matches found
CVE-2017-15381
SQL Injection exists in E-Sic 1.0 via the f parameter to esiclivre/restrito/inc/buscacep.php (aka the zip code search script).
9.8CVSS9.8AI score0.00238EPSS
CVE-2017-15379
An authentication bypass exists in the E-Sic 1.0 /index (aka login) URI via '=''or' values for the username and password.
9.8CVSS9.6AI score0.0376EPSS
CVE-2017-15373
E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php (aka the search private area).
9.8CVSS9.7AI score0.00572EPSS