E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php (aka the search private area).

Published Oct 16, 2017 · Updated Sep 17, 2024 · Assigned by mitre