Fortra FileCatalyst Workflow Unauthenticated SQLi

Fortra FileCatalyst Workflow Unauthenticated SQLi

A SQL injection vulnerability exists in Fortra FileCatalyst Workflow v5.1.6 build 135 and earlier.

A user-supplied jobID is used to form the WHERE clause in an SQL query:

// class unlimited.core.l.p
 public xc findJob(String jobID) {
   if (jobID == null)
     return null;
   if (jobID.equals(""))
     return null;
   b query = new b("*", xc.ps, xc.yr + "='" + jobID + "'");
   xc pjret = null;
   ResultSet rs = null;
   Connection conn = this.hb.getDatabaseSettings().we().b();
   try {
     rs = …

build class fortra injection public query return sql sqli sql injection sql injection vulnerability sql query unauthenticated vulnerability workflow