A vulnerability has been found in fanzila WebFinance 0.5 and classified as critical. This vulnerability affects unknown code of the file htdocs/admin/save_Contract_Signer_Role.php. The manipulation of the argument n/v leads to sql injection. The name of the patch is abad81af614a9ceef3f29ab22ca6bae517619e06. It is recommended to apply a patch to fix this issue. VDB-220054 is the identifier assigned to this vulnerability.
                
            References
                    | Link | Resource | 
|---|---|
| https://vuldb.com/?ctiid.220054 | Third Party Advisory | 
| https://github.com/fanzila/WebFinance/commit/abad81af614a9ceef3f29ab22ca6bae517619e06 | Patch Third Party Advisory | 
| https://vuldb.com/?id.220054 | Third Party Advisory | 
Configurations
                    Information
                Published : 2023-02-03 12:15
Updated : 2023-02-10 09:33
NVD link : CVE-2013-10015
Mitre link : CVE-2013-10015
JSON object : View
CWE
                
                    
                        
                        CWE-89
                        
            Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
                webfinance_project
- webfinance
 


