mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-08 03:26:30 +00:00
18 lines
743 B
Markdown
18 lines
743 B
Markdown
|
### [CVE-2019-17117](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17117)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
A SQL injection vulnerability in processPref.jsp in WiKID 2FA Enterprise Server through 4.2.0-b2053 allows an authenticated user to execute arbitrary SQL commands via the processPref.jsp key parameter.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
- http://packetstormsecurity.com/files/154912/WiKID-Systems-2FA-Enterprise-Server-4.2.0-b2032-SQL-Injection-XSS-CSRF.html
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
- https://github.com/irbishop/CVEs
|
||
|
|
|