A vulnerability was found in fanzila WebFinance 0.5. It has been classified as critical. Affected is an unknown function of the file htdocs/admin/save_roles.php. The manipulation of the argument id leads to sql injection. The name of the patch is 6cfeb2f6b35c1b3a7320add07cd0493e4f752af3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-220056.
                
            References
                    | Link | Resource | 
|---|---|
| https://vuldb.com/?id.220056 | Third Party Advisory | 
| https://vuldb.com/?ctiid.220056 | Permissions Required Third Party Advisory | 
| https://github.com/fanzila/WebFinance/commit/6cfeb2f6b35c1b3a7320add07cd0493e4f752af3 | Patch Third Party Advisory | 
Configurations
                    Information
                Published : 2023-02-03 16:15
Updated : 2023-02-11 20:50
NVD link : CVE-2013-10017
Mitre link : CVE-2013-10017
JSON object : View
CWE
                
                    
                        
                        CWE-89
                        
            Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
                webfinance_project
- webfinance
 


