Описание
A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases via a crafted SQL query in the class credit field.
This issue affects Advance Web: all versions; Legacy Advance: all versions.
Ellucian CRM Advance is not impacted.
EPSS
Процентиль: 10%
0.00203
Низкий
Дефекты
CWE-89
Связанные уязвимости
github
8 дней назад
A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases via a crafted SQL query in the class credit field. This issue affects Advance Web: all versions; Legacy Advance: all versions. Ellucian CRM Advance is not impacted.
EPSS
Процентиль: 10%
0.00203
Низкий
Дефекты
CWE-89