PT-2023-10108 · Unknown · Is Projecto2

CVE-2014-125038 · Publicado 2023-01-02 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Média

Vetor base

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IS Projecto2 (affected versions not specified)

Description A critical vulnerability has been found in IS Projecto2, affecting unknown code in the NewsBean.java file. The manipulation of the date argument leads to SQL injection.

Recommendations Apply the patch aa128b2c9c9fdcbbf5ecd82c1e92103573017fe0 to fix this issue. As a temporary workaround, consider restricting the manipulation of the date argument to minimize the risk of SQL injection exploitation.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2014-125038

Produtos afetados

Is Projecto2

Referências · 6

• https://t.me/cvenotify/41115 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2014-125038 · Nota de Segurança
• https://t.me/cibsecurity/55742 · Publicação no Telegram
• https://vuldb.com/?ctiid.217192 · Nota
• https://vuldb.com/?id.217192 · Nota
• https://github.com/rfsimoes/IS_Projecto2/commit/aa128b2c9c9fdcbbf5ecd82c1e92103573017fe0 · Correção