Описание
SQL injection vulnerability in Runtime/Runtime/AjaxCall.ashx in K2 blackpearl, smartforms, and K2 for SharePoint 4.6.7 allows remote attackers to execute arbitrary SQL commands via the xml parameter.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:nintex:k2_blackpearl:4.6.7:*:*:*:*:*:*:*
cpe:2.3:a:nintex:k2_for_sharepoint:4.6.7:*:*:*:*:*:*:*
cpe:2.3:a:nintex:k2_smartforms:4.6.7:*:*:*:*:*:*:*
EPSS
Процентиль: 67%
0.00549
Низкий
7.5 High
CVSS2
Дефекты
CWE-89
Связанные уязвимости
github
больше 3 лет назад
SQL injection vulnerability in Runtime/Runtime/AjaxCall.ashx in K2 blackpearl, smartforms, and K2 for SharePoint 4.6.7 allows remote attackers to execute arbitrary SQL commands via the xml parameter.
EPSS
Процентиль: 67%
0.00549
Низкий
7.5 High
CVSS2
Дефекты
CWE-89