CVE-2018-6792

HIGH 8.8CVE-2018-6792 · Published 07/02/2018 · updated 17/06/2026

In short

CVE-2018-6792 is a HIGH (CVSS 8.8) vulnerability affecting cvms hub (saifor).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cvms hub saifor	`= 1.3.1`	No fix yet

Description

Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are j_idt118, j_idt120, j_idt122, j_idt124, j_idt126, j_idt128, and j_idt130 under formularioGestionarSecciones:tablaSeccionesMib:*:filter. The GET parameter is nombreAgente.

References

tarlogic.com/advisories/Tarlogic-2018-001.txt · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free