CVE-2017-7952

INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2017-05-16

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Enterprise Asset Management (Infor)

References

• http://seclists.org/fulldisclosure/2017/May/55
• https://www.exploit-db.com/exploits/42028/