The OS Property developer team are proud to announce the resolved security issue of in OS Property. The issue came from Advanced Search tool of OS Property.
Project: OS Property extension Impact: High Severity: Low Versions: 3.12.7 or lower Exploit type: SQL injection Reported Date: 2018-Feb-22 Fixed Date: 2018-Feb-27
Description
The lack of type casting of a variable in SQL statement leads to a SQL injection vulnerability in Advanced Search tool of OS Property extension.
