Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.8
CVSSv3

CVE-2018-17428

Published: 03/10/2018 Updated: 21/11/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Opac Easyweb Five

Vulnerability Summary

An issue exists in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

nexusfi opac easyweb five 5.7

Exploits

Exploit DB: OPAC EasyWeb Five 5.7 - 'biblio' SQL Injection
# Exploit Title: OPAC EasyWeb Five 57 - 'biblio' SQL Injection # Dork: inurl:"indexphp?scelta=campi" # Date: 2018-10-02 # Exploit Author: Dino Barlattani # Vendor Homepage: wwwnexusfiit/ # Software Link: wwwnexusfiit/easywebphp # Version: 57 # Category: Webapps # Platform: PHP # CVE: N/A # POC: # (server ip)/easyweb/w2 ...

References

CWE-89https://www.exploit-db.com/exploits/45518/https://nvd.nist.govhttps://www.exploit-db.com/exploits/45518/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook