Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-424m-x85p-3xw9

Опубликовано: 02 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 9.8

Описание

SQL injection vulnerability in TCMAN GIM v11 in version 20250304. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a GET request using the 'idmant' parameter in '/PC/frmEPIS.aspx'.

SQL injection vulnerability in TCMAN GIM v11 in version 20250304. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a GET request using the 'idmant' parameter in '/PC/frmEPIS.aspx'.

EPSS

Процентиль: 12%
0.00039
Низкий

8.7 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
nvd
2 месяца назад

SQL injection vulnerability in TCMAN GIM v11 in version 20250304. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a GET request using the 'idmant' parameter in '/PC/frmEPIS.aspx'.

EPSS

Процентиль: 12%
0.00039
Низкий

8.7 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-89