CVE-2018-14874

ALTO 8.8CVE-2018-14874 · Published 30/04/2019 · updated 17/06/2026

In breve

CVE-2018-14874 è una vulnerabilità ALTO (CVSS 8.8) che riguarda intellect core banking (polarisft).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 71.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
intellect core banking polarisft	`= 9.7.1`	No fix yet

Description

An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. Input passed through the code parameter in three pages as collaterals/colexe3t.jsp and /references/refsuppu.jsp and /references/refbranu.jsp is mishandled before being used in SQL queries, allowing SQL injection with an authenticated session.

References

neetech18.blogspot.com/2019/03/error-based-sql-injection-vulnerability.html · Exploit

Altre vulnerabilità di intellect core banking

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free