CVE-2018-10197
CRITICALELO ELOenterprise/ELOprofessional <10.18.040 - SQL Injection
Title source: llmDescription
There is a time-based blind SQL injection vulnerability in the Access Manager component before 9.18.040 and 10.x before 10.18.040 in ELO ELOenterprise 9 and 10 and ELOprofessional 9 and 10 that makes it possible to read all database content. The vulnerability exists in the ticket HTTP GET parameter. For example, one can succeed in reading the password hash of the administrator user in the "userdata" table from the "eloam" database.
References (1)
Core 1
Core References
Exploit, Mailing List, Third Party Advisory mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2018/Jul/29
Scores
CVSS v3
9.8
EPSS
0.0150
EPSS Percentile
71.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (1)
elo/access_manager
< 9.18.040
Published
Jul 11, 2018
Tracked Since
Feb 18, 2026