SQL Injection exists in the E-Sic 1.0 password reset parameter (aka the cpfcnpj parameter to the /reset URI).
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-10-23T08:00:00
Updated: 2024-08-05T19:57:25.505Z
Reserved: 2017-10-16T00:00:00
Link: CVE-2017-15378
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-10-23T08:29:00.493
Modified: 2024-02-14T01:17:43.863
Link: CVE-2017-15378
Redhat
No data.