CVE-2018-10256

Опубликовано: 01 мая 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to directly modify the SQL query.

Ссылки

http://packetstormsecurity.com/files/147366/HRSALE-The-Ultimate-HRM-1.0.2-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/44537/
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/147366/HRSALE-The-Ultimate-HRM-1.0.2-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/44537/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:hrsale_project:hrsale:1.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.0025

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-232f-66gw-9wfc