CVE-2017-7997: SQL Injection
Published Jan 8, 2018
·Updated
Multiple SQL injection vulnerabilities in Gespage before 7.4.9 allow remote attackers to execute arbitrary SQL commands via the (1) showprn parameter to webapp/users/prnow.jsp or showmonth parameter to (2) webapp/users/blhistory.jsp or (3) webapp/users/prhistory.jsp.
Affected Software
1 affected component
Gespage Gespage<7.4.9
Event History
Jan 8, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-7997?
CVE-2017-7997 has a high severity rating due to its potential for SQL injection attacks.
2
How do I fix CVE-2017-7997?
To fix CVE-2017-7997, upgrade Gespage to version 7.4.9 or later.
3
What are the affected components in CVE-2017-7997?
CVE-2017-7997 affects the webapp/users/prnow.jsp, webapp/users/blhistory.jsp, and webapp/users/prhistory.jsp components.
4
Who can exploit CVE-2017-7997?
Remote attackers can exploit CVE-2017-7997 to execute arbitrary SQL commands.
5
What are the implications of CVE-2017-7997?
Exploitation of CVE-2017-7997 can lead to unauthorized access to sensitive data stored in the database.