Skip to content
OpenAdvisories
Unscored CVE-2018-12977 EUVD-2018-4928GHSA-5mc9-j73j-vp2m

A SQL injection vulnerability in the SoftExpert (SE) Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pu…

Published Jul 9, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

A SQL injection vulnerability in the SoftExpert (SE) Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section.

References