exploitDog

GHSA-vjg8-mp98-7f39

Опубликовано: 02 мая 2022

Источник: github

Github: Не прошло ревью

Описание

SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter.

SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2009-3499
http://antisecurity.org/bplawyercasedocument-1-0-mssql-vulnerabilities.antisecurity
http://secunia.com/advisories/36796
http://www.vupen.com/english/advisories/2009/2733

EPSS

Процентиль: 59%

0.00961

Низкий

CVE ID

Дефекты

CWE-89

Связанные уязвимости

CVE-2009-3499

nvd

почти 17 лет назад

SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter.

EPSS

Процентиль: 59%

0.00961

Низкий

CVE ID

Дефекты

CWE-89