Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:44927
HistoryJan 04, 2024 - 4:50 a.m.

SQL Injection

2024-01-0404:50:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
sql injection
gilacms
login portal
vulnerability
web scripts
security

8.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.3%

gilacms/gila is vulnerable to SQL Injection. The vulnerability is due to improper ID parameter sanitization within login portal endpoint, which allows an attacker to execute arbitrary web scripts resulting in SQL injection.

8.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.3%