CVE-2017-20104 — Simplessus Cookie Time sql injection

Description (CNA)

A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code of the component Cookie Handler. The manipulation of the argument UWA_SID leads to sql injection (Time). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.8.3 is able to address this issue. It is recommended to upgrade the affected component.

Affected (CNA)

Vendor / product	Versions
unspecified / Simplessus	affected 3.7.7

CWE

CWE-89

References

http://seclists.org/bugtraq/2017/Feb/39
https://vuldb.com/?id.97252

ADP enrichment

CVE

No English description supplied.

http://seclists.org/bugtraq/2017/Feb/39
https://vuldb.com/?id.97252

CISA-ADP

No English description supplied.

No references supplied.