CVE-2014-100019

CVE-2014-100019

EPSS 1.9%

SQL injection vulnerability in the LTree converter in Pomm before 1.1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://secunia.com/advisories/56986 https://exchange.xforce.ibmcloud.com/vulnerabilities/91276 https://github.com/chanmix51/Pomm/issues/122 http://www.pomm-project.org/news/pomm-1-1-5-is-out.html http://www.securityfocus.com/bid/65711