CVE-2017-5359

EUVD-2017-14463
EasyCom SQL iPlug allows remote attackers to cause a denial of service via the D$EVAL parameter to the default URI.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
Affected Products (NVD)
VendorProductVersion
easycom-aurasql_iplug
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://hyp3rlinx.altervista.org/advisories/EASYCOM-SQL-IPLUG-DENIAL-OF-SERVICE.txt
http://packetstormsecurity.com/files/141300/EasyCom-SQL-iPlug-Denial-Of-Service.html
http://seclists.org/fulldisclosure/2017/Feb/61
http://www.securityfocus.com/archive/1/540218/100/0/threaded
http://www.securityfocus.com/bid/96420
https://www.exploit-db.com/exploits/41426/
http://hyp3rlinx.altervista.org/advisories/EASYCOM-SQL-IPLUG-DENIAL-OF-SERVICE.txt
http://packetstormsecurity.com/files/141300/EasyCom-SQL-iPlug-Denial-Of-Service.html
http://seclists.org/fulldisclosure/2017/Feb/61
http://www.securityfocus.com/archive/1/540218/100/0/threaded
http://www.securityfocus.com/bid/96420
https://www.exploit-db.com/exploits/41426/