Описание
SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3) DNS Manager allows remote attackers to bypass authentication via SQL code in the password field.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:logisense:dns_manager_system:*:*:*:*:*:*:*:*
cpe:2.3:a:logisense:hawk-i:5.2:*:*:*:*:*:*:*
cpe:2.3:a:logisense:hawk-i:asp:*:*:*:*:*:*:*
EPSS
Процентиль: 74%
0.00807
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3) DNS Manager allows remote attackers to bypass authentication via SQL code in the password field.
EPSS
Процентиль: 74%
0.00807
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other