CVE-2013-10017

A vulnerability was found in fanzila WebFinance 0.5. It has been classified as critical. Affected is an unknown function of the file htdocs/admin/save_roles.php. The manipulation of the argument id leads to sql injection. The name of the patch is 6cfeb2f6b35c1b3a7320add07cd0493e4f752af3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-220056.
References
Link Resource
https://vuldb.com/?id.220056 Third Party Advisory
https://vuldb.com/?ctiid.220056 Permissions Required Third Party Advisory
https://github.com/fanzila/WebFinance/commit/6cfeb2f6b35c1b3a7320add07cd0493e4f752af3 Patch Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:webfinance_project:webfinance:0.5:*:*:*:*:*:*:*

Information

Published : 2023-02-03 16:15

Updated : 2023-02-11 20:50


NVD link : CVE-2013-10017

Mitre link : CVE-2013-10017


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

webfinance_project

  • webfinance