Skip to content

CVE-2017-15378 SQL Injection exists in the E-Sic 1.0 password reset parameter (aka the cpfcnpj parameter to the /reset URI).

HighCVSS 8.8 EPSS 1.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SQL Injection exists in the E-Sic 1.0 password reset parameter (aka the cpfcnpj parameter to the /reset URI).

Affected products

ProductAffected versionsFixed in
softwarepublico e-sic = 1.0 No fix listed

References

  • whiteboyz.xyz exploit third-party-advisory url-repurposed
  • 42981 exploit third-party-advisory vdb-entry