Description
SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5. The POST parameter dat_cat_id is concatenated into a SQL query without any input validation/sanitization.
Unscored
CVE-2017-6492
EUVD-2017-15548GHSA-g527-7ph8-4q3j
SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5. The POST parameter dat_cat_id is concatenate…
Published Mar 5, 2017 · Updated Aug 5, 2024 · Assigned by mitre