CVE-2017-5359

EasyCom SQL iPlug allows remote attackers to cause a denial of service via the D$EVAL parameter to the default URI.

CVSS v3.0

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

7.36% chance of exploitation in the next 30 days, 94th percentile

Published

2017-03-15

Updated

2024-08-05

Proof-of-concept exploits (3)

• http://hyp3rlinx.altervista.org/advisories/EASYCOM-SQL-IPLUG-DENIAL-OF-SERVICE.txt
• http://packetstormsecurity.com/files/141300/EasyCom-SQL-iPlug-Denial-Of-Service.html
• http://seclists.org/fulldisclosure/2017/Feb/61

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/41426

References

• CVE Record
• NVD entry

Related

• CVE-2017-5358
• CVE-2017-5367
• CVE-2017-5346
• CVE-2017-5368
• CVE-2017-5344
• CVE-2017-5375