cve/2019/CVE-2019-18890.md

CVE-2019-18890

Description

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query.

POC

Reference

• https://github.com/RealLinkers/CVE-2019-18890

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/RealLinkers/CVE-2019-17427
• https://github.com/RealLinkers/CVE-2019-18890
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/hectorgie/PoC-in-GitHub