CVE-2018-6792

Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the…

published February 7, 2018

CVSS
—
EPSS
1%
Percentile
64.8
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are j_idt118, j_idt120, j_idt122, j_idt124, j_idt126, j_idt128, and j_idt130 under formularioGestionarSecciones:tablaSeccionesMib:*:filter. The GET parameter is nombreAgente.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01086 · 64.8th percentile
Published
2018-02-07T02:00Z
EPSS history
Timeline
  • 07 FEB 02:00Z
    Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the…
    cvelistv5