Description
webvendome - webvendome SQL Injection.
SQL Injection in the Parameter " DocNumber"
Request :
Get Request :
/webvendome/showfiles.aspx?jobnumber=nullDoc Number=HERE.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| webvendome | webvendome | All versions – < Upgrade to the latest version. | Upgrade to the latest version. |