CVE-2017-15381: Softwarepublico E-Sic

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

SQL Injection exists in E-Sic 1.0 via the f parameter to esiclivre/restrito/inc/buscacep.php (aka the zip code search script).

Affected products

• Softwarepublico E-Sic: version 1.0 only

Published 2017-10-23. Last modified 2026-06-17.