A vulnerability was found in fanzila WebFinance 0.5 and classified as critical. This issue affects some unknown processing of the file htdocs/admin/save_taxes.php. The manipulation of the argument id leads to sql injection. The patch is named 306f170ca2a8203ae3d8f51fb219ba9e05b945e1. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-220055.
References
| Link | Resource |
|---|---|
| https://github.com/fanzila/WebFinance/commit/306f170ca2a8203ae3d8f51fb219ba9e05b945e1 | Patch Third Party Advisory |
| https://vuldb.com/?ctiid.220055 | Third Party Advisory |
| https://vuldb.com/?id.220055 | Third Party Advisory |
Configurations
History
12 Oct 2023, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A vulnerability was found in fanzila WebFinance 0.5 and classified as critical. This issue affects some unknown processing of the file htdocs/admin/save_taxes.php. The manipulation of the argument id leads to sql injection. The patch is named 306f170ca2a8203ae3d8f51fb219ba9e05b945e1. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-220055. |
Information
Published : 2023-02-03 20:15
Updated : 2024-05-17 00:54
NVD link : CVE-2013-10016
Mitre link : CVE-2013-10016
CVE.ORG link : CVE-2013-10016
JSON object : View
Products Affected
webfinance_project
- webfinance
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')