PT-2018-14746
CVE-2018-18963
·
Published
2018-11-06
·
Updated
2018-12-13
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Degrau Publicidade e Internet Plataforma de E-commerce (affected versions not specified)
Description
The issue concerns SQL Injection via the 'busca/' URI in the Busca.aspx.cs file. This allows for potential exploitation of the database.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾