Описание
Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the ISS_TECH_CENTER_LOGIN cookie in search.asp and (2) one or more cookies in DoCustomerOptions.asp.
Ссылки
- Vendor Advisory
- Exploit
- ExploitVendor Advisory
- Exploit
- Vendor Advisory
- Exploit
- ExploitVendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:internet_sofware_sciences:web\+center:4.0.1:*:*:*:*:*:*:*
EPSS
Процентиль: 64%
0.00464
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the ISS_TECH_CENTER_LOGIN cookie in search.asp and (2) one or more cookies in DoCustomerOptions.asp.
EPSS
Процентиль: 64%
0.00464
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other