CWE Code: 89
Vulnerability Type: sql_injection
CVSS Score: 4.0
CWE Name:  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Summary: a sql injection issue exists in a file upload handler in redcap 7.x before 7.0.11 via a trailing substring to senditcontroller:upload.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2018-02-08
Last Modified Date: 2018-02-26