PT-2023-10006 · Unknown · Fanzila Webfinance
CVE-2013-10017
·
Publicado
2023-02-03
·
Atualizado
2024-05-17
CVSS v2.0
5.2
Média
| Vetor | AV:A/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
fanzila WebFinance version 0.5
Description
A critical issue has been found in fanzila WebFinance, affecting an unknown function of the file htdocs/admin/save roles.php. The manipulation of the
id argument leads to sql injection.Recommendations
Apply a patch to fix this issue, specifically the patch named 6cfeb2f6b35c1b3a7320add07cd0493e4f752af3.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Fanzila Webfinance