CVE-2017-6492

SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5

published March 5, 2017

CVSS
—
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5. The POST parameter dat_cat_id is concatenated into a SQL query without any input validation/sanitization.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01356 · 71.2th percentile
Published
2017-03-05T20:00Z
EPSS history
Timeline
  • 05 MAR 20:00Z
    SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5
    cvelistv5