exploitDog

GHSA-qqw5-9xgq-fw5j

Опубликовано: 29 апр. 2022

Источник: github

Github: Не прошло ревью

Описание

SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter.

SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2004-1732
https://exchange.xforce.ibmcloud.com/vulnerabilities/17054
http://marc.info/?l=bugtraq&m=109314495007280&w=2
http://secunia.com/advisories/12340
http://www.securityfocus.com/bid/10996

EPSS

Процентиль: 69%

0.01345

Низкий

CVE ID

Связанные уязвимости

CVE-2004-1732

nvd

почти 22 года назад

SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter.

CVE-2004-1732

debian

почти 22 года назад

SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4. ...

EPSS

Процентиль: 69%

0.01345

Низкий

CVE ID