Skip to content

CVE-2018-17428 An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter.

CriticalCVSS 9.8 EPSS 2.8% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter.

Affected products

ProductAffected versionsFixed in
nexusfi opac easyweb five = 5.7 No fix listed

References

  • 45518 exploit third-party-advisory vdb-entry