CVE-2014-8366 in openSIS

Riassunto

di MITRE

SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 20/10/2014
• Divulgazione: 20/10/2014
• Moderazione: accettato
• Voce: VDB-72497
• CPE: pronto
• CWE: CWE-89 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.00360
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-8366
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-8366
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-8366/