CVE-2018-17428 An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter.
CriticalCVSS 9.8
EPSS 2.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nexusfi opac easyweb five | = 5.7 | No fix listed |
References
- 45518 exploit third-party-advisory vdb-entry