PT-2023-10004 · Unknown · Fanzila Webfinance
CVE-2013-10015
·
Publicado
2023-02-03
·
Atualizado
2024-05-17
CVSS v2.0
5.2
Média
| Vetor | AV:A/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
fanzila WebFinance version 0.5
Description
A critical issue has been found in the file htdocs/admin/save Contract Signer Role.php, where the manipulation of the argument
n/v leads to sql injection.Recommendations
Apply the patch identified as abad81af614a9ceef3f29ab22ca6bae517619e06 to fix this issue. As a temporary workaround, consider restricting access to the
save Contract Signer Role.php file until the patch is applied.Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Fanzila Webfinance