Kinsey : Security Vulnerabilities, CVEs,
Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitrary SQL commands via the (1) TABLE parameter to esbus/servlet/GetSQLData or (2) QUERY parameter to KK_LS9ReportingPortal/GetData.
Max CVSS
9.8
EPSS Score
0.13%
Published
2017-03-20
Updated
2017-03-23
1 vulnerabilities found