CalvinBackup/CVEs-PoC
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-05-26 01:07:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
e7be3f24665f27f4f8a571f070ce04dfd1f54dc4
CVEs-PoC/2017/CVE-2017-1000120.md
T
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

681 B
Raw Blame History

CVE-2017-1000120

Description

[ERPNext][Frappe Version <= 7.1.27] SQL injection vulnerability in frappe.share.get_users allows remote authenticated users to execute arbitrary SQL commands via the fields parameter.

POC

Reference

Github

No PoCs found on GitHub currently.

Reference in New Issue View Git Blame Copy Permalink