CVE-2017-7351

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Feb 8, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-73525.4Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web scripCVE-2017-73579.1Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importCVE-2017-73587.3In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path locCVE-2017-73596.1Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack.CVE-2017-73606.1Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack.CVE-2017-73616.1Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack.CVE-2017-73626.1Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack.CVE-2017-73636.1Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack.CVE-2017-73649.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_daCVE-2017-73657.8In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated.CVE-2017-73665.5In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters.CVE-2017-73677.8In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image.
CVE-2017-7351: High severity, CVSS 8.8 | Vulnix