CVE-2017-5359

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

EasyCom SQL iPlug allows remote attackers to cause a denial of service via the D$EVAL parameter to the default URI.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://hyp3rlinx.altervista.org/advisories/EASYCOM-SQL-IPLUG-DENIAL-OF-SERVICE.txtExploit, Mailing List, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/141300/EasyCom-SQL-iPlug-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2017/Feb/61Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/540218/100/0/threaded
http://www.securityfocus.com/bid/96420Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/41426/Exploit, Third Party Advisory, VDB Entry
http://hyp3rlinx.altervista.org/advisories/EASYCOM-SQL-IPLUG-DENIAL-OF-SERVICE.txtExploit, Mailing List, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/141300/EasyCom-SQL-iPlug-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2017/Feb/61Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/540218/100/0/threaded
http://www.securityfocus.com/bid/96420Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/41426/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Mar 15, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-53615.9Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 does not use a constant-time comparison algorithm for se CVE-2017-53647.8Memory Corruption Vulnerability in Foxit PDF Toolkit v1.3 allows an attacker to cause Denial of Service and Remote Code Execution when the v CVE-2017-53676.1Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.30 and v1.29, an open-source CCTV server CVE-2017-53688.8ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, is vulnerable to CSRF (Cross Site Request Forgery) which allows a re CVE-2017-53717.5Odata Server in SAP Adaptive Server Enterprise (ASE) 16 allows remote attackers to cause a denial of service (process crash) via a series of CVE-2017-53727.5The function msp (aka MSPRuntimeInterface) in the P4 SERVERCORE component in SAP AS JAVA allows remote attackers to obtain sensitive system CVE-2017-53739.8Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed evidence of memory corruption and we presum CVE-2017-53749.8Memory safety bugs were reported in Firefox 50.1. Some of these bugs showed evidence of memory corruption and we presume that with enough ef CVE-2017-53759.8JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability af CVE-2017-53769.8Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51 CVE-2017-53779.8A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable cra CVE-2017-53787.5Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered thr